Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f29cc85-3074-44d7-abee-6fa9edc20aec", "record_id": "flaws_cloudtrail:0000000:8f29cc85-3074-44d7-abee-6fa9edc20aec", "row_index": 0, "timestamp": "2018-10-10T20:17:41Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f29cc85-3074-44d7-abee-6fa9edc20aec", "eventTime": "2018-10-10T20:17:41Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bce0ab41-9320-42f6-84c7-8fd1fc8b1a44", "record_id": "flaws_cloudtrail:0000001:bce0ab41-9320-42f6-84c7-8fd1fc8b1a44", "row_index": 1, "timestamp": "2018-10-10T20:17:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bce0ab41-9320-42f6-84c7-8fd1fc8b1a44", "eventTime": "2018-10-10T20:17:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b36f70-09f1-419f-9b9b-c14e34917c99", "record_id": "flaws_cloudtrail:0000002:16b36f70-09f1-419f-9b9b-c14e34917c99", "row_index": 2, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b36f70-09f1-419f-9b9b-c14e34917c99", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e98db165-d234-4dca-b12d-017674810a8b", "record_id": "flaws_cloudtrail:0000003:e98db165-d234-4dca-b12d-017674810a8b", "row_index": 3, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e98db165-d234-4dca-b12d-017674810a8b", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ac5d28d-0cec-41f0-a63c-9d027e3df5ef", "record_id": "flaws_cloudtrail:0000004:3ac5d28d-0cec-41f0-a63c-9d027e3df5ef", "row_index": 4, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ac5d28d-0cec-41f0-a63c-9d027e3df5ef", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff0a255-bccd-41df-b3bb-ecf0d84c169f", "record_id": "flaws_cloudtrail:0000005:bff0a255-bccd-41df-b3bb-ecf0d84c169f", "row_index": 5, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff0a255-bccd-41df-b3bb-ecf0d84c169f", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f3f26cc-2bb9-42d5-b17c-79bef3a9a782", "record_id": "flaws_cloudtrail:0000006:9f3f26cc-2bb9-42d5-b17c-79bef3a9a782", "row_index": 6, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f3f26cc-2bb9-42d5-b17c-79bef3a9a782", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d4070e5-5e76-409c-8693-844832aa92", "record_id": "flaws_cloudtrail:0000007:7d4070e5-5e76-409c-8693-844832aa92", "row_index": 7, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d4070e5-5e76-409c-8693-844832aa92", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b1d942-4604-478a-aff6-3dfc1b1c36ce", "record_id": "flaws_cloudtrail:0000008:48b1d942-4604-478a-aff6-3dfc1b1c36ce", "row_index": 8, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b1d942-4604-478a-aff6-3dfc1b1c36ce", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e279c59d-b52e-47c4-aad4-44b8db67d447", "record_id": "flaws_cloudtrail:0000009:e279c59d-b52e-47c4-aad4-44b8db67d447", "row_index": 9, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e279c59d-b52e-47c4-aad4-44b8db67d447", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a089048b-24c3-4c41-9b7d-d59d36666182", "record_id": "flaws_cloudtrail:0000010:6a089048b-24c3-4c41-9b7d-d59d36666182", "row_index": 10, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a089048b-24c3-4c41-9b7d-d59d36666182", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442a53dc-7539-4aae-aa57-b375140e20ae0", "record_id": "flaws_cloudtrail:0000011:442a53dc-7539-4aae-aa57-b375140e20ae0", "row_index": 11, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442a53dc-7539-4aae-aa57-b375140e20ae0", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daed2b4c-e3c2-4a1a-81b2-7ac4d970bc82", "record_id": "flaws_cloudtrail:0000012:daed2b4c-e3c2-4a1a-81b2-7ac4d970bc82", "row_index": 12, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daed2b4c-e3c2-4a1a-81b2-7ac4d970bc82", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31ab43ed-38cc-4ef0-abc8-30d870c0920d", "record_id": "flaws_cloudtrail:0000013:31ab43ed-38cc-4ef0-abc8-30d870c0920d", "row_index": 13, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31ab43ed-38cc-4ef0-abc8-30d870c0920d", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f366f176-9261-4da8-9dd2-76941ec9d098", "record_id": "flaws_cloudtrail:0000014:f366f176-9261-4da8-9dd2-76941ec9d098", "row_index": 14, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f366f176-9261-4da8-9dd2-76941ec9d098", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a557368-e61e-40d5-bfb3-86a58cde3a96", "record_id": "flaws_cloudtrail:0000015:a557368-e61e-40d5-bfb3-86a58cde3a96", "row_index": 15, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a557368-e61e-40d5-bfb3-86a58cde3a96", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "803e6357-75fa-46aa-8898-ca3b9dd21d40", "record_id": "flaws_cloudtrail:0000016:803e6357-75fa-46aa-8898-ca3b9dd21d40", "row_index": 16, "timestamp": "2018-10-10T20:17:42Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "803e6357-75fa-46aa-8898-ca3b9dd21d40", "eventTime": "2018-10-10T20:17:42Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfac2cca-8a4c-4957-a67b-40e2b7b583c2", "record_id": "flaws_cloudtrail:0000017:bfac2cca-8a4c-4957-a67b-40e2b7b583c2", "row_index": 17, "timestamp": "2018-10-10T20:17:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfac2cca-8a4c-4957-a67b-40e2b7b583c2", "eventTime": "2018-10-10T20:17:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "Boto3/1.9.20 Python/2.7.15 Linux/4.16.0-kali2-amd64 Botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21cb003e-fff9-4a62-a745-51c3c2cc81d7", "record_id": "flaws_cloudtrail:0000018:21cb003e-fff9-4a62-a745-51c3c2cc81d7", "row_index": 18, "timestamp": "2018-10-10T20:21:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-50"], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21cb003e-fff9-4a62-a745-51c3c2cc81d7", "eventTime": "2018-10-10T20:21:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-50", "roleSessionName": "reader-6495"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-50"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3519e417-4055-4616-a500-984618442187", "record_id": "flaws_cloudtrail:0000019:3519e417-4055-4616-a500-984618442187", "row_index": 19, "timestamp": "2018-10-10T20:22:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3519e417-4055-4616-a500-984618442187", "eventTime": "2018-10-10T20:22:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342197f6-d054-4fd2-bbd6-afe23606ded0", "record_id": "flaws_cloudtrail:0000020:342197f6-d054-4fd2-bbd6-afe23606ded0", "row_index": 20, "timestamp": "2018-10-10T20:24:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342197f6-d054-4fd2-bbd6-afe23606ded0", "eventTime": "2018-10-10T20:24:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65233da4-5c39-4410-af28-8699213c26c6", "record_id": "flaws_cloudtrail:0000021:65233da4-5c39-4410-af28-8699213c26c6", "row_index": 21, "timestamp": "2018-10-10T20:24:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463-archive"], "raw_record_size_bytes": 647, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65233da4-5c39-4410-af28-8699213c26c6", "eventTime": "2018-10-10T20:24:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0ef6ab-9aff-4764-b8ea-4d49b6bac9cb", "record_id": "flaws_cloudtrail:0000022:8e0ef6ab-9aff-4764-b8ea-4d49b6bac9cb", "row_index": 22, "timestamp": "2018-10-10T20:26:45Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 651, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0ef6ab-9aff-4764-b8ea-4d49b6bac9cb", "eventTime": "2018-10-10T20:26:45Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35816abf-93be-4e4d-a3c7-73a6259d8a0a", "record_id": "flaws_cloudtrail:0000023:35816abf-93be-4e4d-a3c7-73a6259d8a0a", "row_index": 23, "timestamp": "2018-10-10T20:29:57Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35816abf-93be-4e4d-a3c7-73a6259d8a0a", "eventTime": "2018-10-10T20:29:57Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "key": "customer/05999.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4855ff81-0096-40d2-94b3-e3532ff82808", "record_id": "flaws_cloudtrail:0000024:4855ff81-0096-40d2-94b3-e3532ff82808", "row_index": 24, "timestamp": "2018-10-10T20:30:18Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4855ff81-0096-40d2-94b3-e3532ff82808", "eventTime": "2018-10-10T20:30:18Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "key": "customer/05680.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "590b0c95-00f9-4de4-8c07-e70500b16491", "record_id": "flaws_cloudtrail:0000025:590b0c95-00f9-4de4-8c07-e70500b16491", "row_index": 25, "timestamp": "2018-10-10T20:30:54Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "590b0c95-00f9-4de4-8c07-e70500b16491", "eventTime": "2018-10-10T20:30:54Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "key": "customer/07876.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a19df66f-bc1e-434f-9fc9-43772861827e", "record_id": "flaws_cloudtrail:0000026:a19df66f-bc1e-434f-9fc9-43772861827e", "row_index": 26, "timestamp": "2018-10-10T20:31:48Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a19df66f-bc1e-434f-9fc9-43772861827e", "eventTime": "2018-10-10T20:31:48Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "key": "customer/03083.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0254a441-bfb6-4a20-af4f-9a88c2c59e31", "record_id": "flaws_cloudtrail:0000027:0254a441-bfb6-4a20-af4f-9a88c2c59e31", "row_index": 27, "timestamp": "2018-10-10T20:32:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAFL6VAB8PJ292OX6C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "28.108.223.195", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8463"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0254a441-bfb6-4a20-af4f-9a88c2c59e31", "eventTime": "2018-10-10T20:32:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "28.108.223.195", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAFL6VAB8PJ292OX6C", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8463", "key": "customer/00876.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8463"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddb05ae1-46f0-4d18-8f51-53576abea5", "record_id": "flaws_cloudtrail:0000028:ddb05ae1-46f0-4d18-8f51-53576abea5", "row_index": 28, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddb05ae1-46f0-4d18-8f51-53576abea5", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11a660e6-fcb8-4415-83e1-84f8f64c3945", "record_id": "flaws_cloudtrail:0000029:11a660e6-fcb8-4415-83e1-84f8f64c3945", "row_index": 29, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11a660e6-fcb8-4415-83e1-84f8f64c3945", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e16d526e-d384-4fbd-85a5-b3f6110debd8", "record_id": "flaws_cloudtrail:0000030:e16d526e-d384-4fbd-85a5-b3f6110debd8", "row_index": 30, "timestamp": "2018-10-10T20:37:21Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e16d526e-d384-4fbd-85a5-b3f6110debd8", "eventTime": "2018-10-10T20:37:21Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f8c9df5-25a0-464f-b5e9-77f2c2496c92", "record_id": "flaws_cloudtrail:0000031:5f8c9df5-25a0-464f-b5e9-77f2c2496c92", "row_index": 31, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f8c9df5-25a0-464f-b5e9-77f2c2496c92", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f39e12-8899-4812-aa4e-4f8369a0b6c4", "record_id": "flaws_cloudtrail:0000032:28f39e12-8899-4812-aa4e-4f8369a0b6c4", "row_index": 32, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f39e12-8899-4812-aa4e-4f8369a0b6c4", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428184d44-b49c-4d46-b4a6-99727b752c8", "record_id": "flaws_cloudtrail:0000033:428184d44-b49c-4d46-b4a6-99727b752c8", "row_index": 33, "timestamp": "2018-10-10T20:37:21Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428184d44-b49c-4d46-b4a6-99727b752c8", "eventTime": "2018-10-10T20:37:21Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91846b-70d3-4063-855a-3f078085a865", "record_id": "flaws_cloudtrail:0000034:a91846b-70d3-4063-855a-3f078085a865", "row_index": 34, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 651, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91846b-70d3-4063-855a-3f078085a865", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209f797e-dddc-4c53-ba59-d72874c06", "record_id": "flaws_cloudtrail:0000035:209f797e-dddc-4c53-ba59-d72874c06", "row_index": 35, "timestamp": "2018-10-10T20:37:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209f797e-dddc-4c53-ba59-d72874c06", "eventTime": "2018-10-10T20:37:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91130f7-0dde-4026-88a5-b7c7ce517ee6", "record_id": "flaws_cloudtrail:0000036:91130f7-0dde-4026-88a5-b7c7ce517ee6", "row_index": 36, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91130f7-0dde-4026-88a5-b7c7ce517ee6", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ad728b-ca25-41d3-b1e2-b2c8fdbdf6b7", "record_id": "flaws_cloudtrail:0000037:69ad728b-ca25-41d3-b1e2-b2c8fdbdf6b7", "row_index": 37, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ad728b-ca25-41d3-b1e2-b2c8fdbdf6b7", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c077bda2-28b8-403c-a1ce-8799b6499fbc", "record_id": "flaws_cloudtrail:0000038:c077bda2-28b8-403c-a1ce-8799b6499fbc", "row_index": 38, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c077bda2-28b8-403c-a1ce-8799b6499fbc", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9365be65-2371-4567-a949-6c3d7af3cd19", "record_id": "flaws_cloudtrail:0000039:9365be65-2371-4567-a949-6c3d7af3cd19", "row_index": 39, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9365be65-2371-4567-a949-6c3d7af3cd19", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c82917-3139-48e0-a2c6-53cb3871ce31", "record_id": "flaws_cloudtrail:0000040:1c82917-3139-48e0-a2c6-53cb3871ce31", "row_index": 40, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c82917-3139-48e0-a2c6-53cb3871ce31", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c56b03-3fed-4fe9-b484-982923d29d", "record_id": "flaws_cloudtrail:0000041:b8c56b03-3fed-4fe9-b484-982923d29d", "row_index": 41, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c56b03-3fed-4fe9-b484-982923d29d", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "939031b7-88b9-4368-9542-abbb20813e4", "record_id": "flaws_cloudtrail:0000042:939031b7-88b9-4368-9542-abbb20813e4", "row_index": 42, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "939031b7-88b9-4368-9542-abbb20813e4", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8bd9ce9-f66a-4814-b051-0c4655b0206c", "record_id": "flaws_cloudtrail:0000043:e8bd9ce9-f66a-4814-b051-0c4655b0206c", "row_index": 43, "timestamp": "2018-10-10T20:37:22Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8bd9ce9-f66a-4814-b051-0c4655b0206c", "eventTime": "2018-10-10T20:37:22Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee223828b-be7c-459f-b82b-d4bb2dcbd42c", "record_id": "flaws_cloudtrail:0000044:ee223828b-be7c-459f-b82b-d4bb2dcbd42c", "row_index": 44, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee223828b-be7c-459f-b82b-d4bb2dcbd42c", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d07bce8e-cd37-49eb-be7c-67613f48b5c8", "record_id": "flaws_cloudtrail:0000045:d07bce8e-cd37-49eb-be7c-67613f48b5c8", "row_index": 45, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d07bce8e-cd37-49eb-be7c-67613f48b5c8", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a4a9548-adfa-4467-97b0-50e28380fb8", "record_id": "flaws_cloudtrail:0000046:8a4a9548-adfa-4467-97b0-50e28380fb8", "row_index": 46, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a4a9548-adfa-4467-97b0-50e28380fb8", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eebad30-64fe-4482-920f-696db02c11da", "record_id": "flaws_cloudtrail:0000047:4eebad30-64fe-4482-920f-696db02c11da", "row_index": 47, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eebad30-64fe-4482-920f-696db02c11da", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6c179e-6afe-4942-a324-3124b6c57027", "record_id": "flaws_cloudtrail:0000048:8e6c179e-6afe-4942-a324-3124b6c57027", "row_index": 48, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6c179e-6afe-4942-a324-3124b6c57027", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce18ac4a-74fd-4fb1-957f-eb4035328966", "record_id": "flaws_cloudtrail:0000049:ce18ac4a-74fd-4fb1-957f-eb4035328966", "row_index": 49, "timestamp": "2018-10-10T20:37:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce18ac4a-74fd-4fb1-957f-eb4035328966", "eventTime": "2018-10-10T20:37:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8155cf6b-42c6-4d1a-8f06-87406e8c32", "record_id": "flaws_cloudtrail:0000050:8155cf6b-42c6-4d1a-8f06-87406e8c32", "row_index": 50, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8155cf6b-42c6-4d1a-8f06-87406e8c32", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ba9f2f-675a-4b27-b8ab-79d01779e224", "record_id": "flaws_cloudtrail:0000051:c8ba9f2f-675a-4b27-b8ab-79d01779e224", "row_index": 51, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ba9f2f-675a-4b27-b8ab-79d01779e224", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119af25b-685f-4809-bc36-372b3f5782fd", "record_id": "flaws_cloudtrail:0000052:119af25b-685f-4809-bc36-372b3f5782fd", "row_index": 52, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119af25b-685f-4809-bc36-372b3f5782fd", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bad6ca1-6889-4459-a41b-184c84f53da6", "record_id": "flaws_cloudtrail:0000053:9bad6ca1-6889-4459-a41b-184c84f53da6", "row_index": 53, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bad6ca1-6889-4459-a41b-184c84f53da6", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15b63af1-75d2-4f1d-a629-220dac3df58c", "record_id": "flaws_cloudtrail:0000054:15b63af1-75d2-4f1d-a629-220dac3df58c", "row_index": 54, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15b63af1-75d2-4f1d-a629-220dac3df58c", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03e61573-4ffd-427f-9e9d-e3e5b843197b", "record_id": "flaws_cloudtrail:0000055:03e61573-4ffd-427f-9e9d-e3e5b843197b", "row_index": 55, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03e61573-4ffd-427f-9e9d-e3e5b843197b", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89d15d8-db4a-45f3-ba4c-49dbf4b8be68", "record_id": "flaws_cloudtrail:0000056:e89d15d8-db4a-45f3-ba4c-49dbf4b8be68", "row_index": 56, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89d15d8-db4a-45f3-ba4c-49dbf4b8be68", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ec7da3c-8d0c-4579-89af-ca67e884e570", "record_id": "flaws_cloudtrail:0000057:5ec7da3c-8d0c-4579-89af-ca67e884e570", "row_index": 57, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ec7da3c-8d0c-4579-89af-ca67e884e570", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c752b9a4-5a2a-4637-bc5e-fc4134931ada", "record_id": "flaws_cloudtrail:0000058:c752b9a4-5a2a-4637-bc5e-fc4134931ada", "row_index": 58, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c752b9a4-5a2a-4637-bc5e-fc4134931ada", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb962079-c57e-4fad-99a6-e086e9110ab1", "record_id": "flaws_cloudtrail:0000059:bb962079-c57e-4fad-99a6-e086e9110ab1", "row_index": 59, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb962079-c57e-4fad-99a6-e086e9110ab1", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbb390ea-82a2-45be-b84a-97723cd47133", "record_id": "flaws_cloudtrail:0000060:dbb390ea-82a2-45be-b84a-97723cd47133", "row_index": 60, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbb390ea-82a2-45be-b84a-97723cd47133", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb6a016-05de-42c1-b2a3-6a6b0bdf1767", "record_id": "flaws_cloudtrail:0000061:eeb6a016-05de-42c1-b2a3-6a6b0bdf1767", "row_index": 61, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb6a016-05de-42c1-b2a3-6a6b0bdf1767", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "783ed57a-8801-42c7-a0e9-0f3ea449e8ac", "record_id": "flaws_cloudtrail:0000062:783ed57a-8801-42c7-a0e9-0f3ea449e8ac", "row_index": 62, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "783ed57a-8801-42c7-a0e9-0f3ea449e8ac", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16de92d9-0acb-4555-95b8-f63d6db18c9d", "record_id": "flaws_cloudtrail:0000063:16de92d9-0acb-4555-95b8-f63d6db18c9d", "row_index": 63, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16de92d9-0acb-4555-95b8-f63d6db18c9d", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f98778-cc8f-424e-9615-b1e30fce7a4d", "record_id": "flaws_cloudtrail:0000064:08f98778-cc8f-424e-9615-b1e30fce7a4d", "row_index": 64, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f98778-cc8f-424e-9615-b1e30fce7a4d", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f514196f3-8c34-4f38-b6f7-620759b555316f", "record_id": "flaws_cloudtrail:0000065:f514196f3-8c34-4f38-b6f7-620759b555316f", "row_index": 65, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f514196f3-8c34-4f38-b6f7-620759b555316f", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "112b5129-5294-46af-ab4c-63f395e317b2", "record_id": "flaws_cloudtrail:0000066:112b5129-5294-46af-ab4c-63f395e317b2", "row_index": 66, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "112b5129-5294-46af-ab4c-63f395e317b2", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "281ebdd2-5d25-44f2-af31-7b30c3d4e211", "record_id": "flaws_cloudtrail:0000067:281ebdd2-5d25-44f2-af31-7b30c3d4e211", "row_index": 67, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "281ebdd2-5d25-44f2-af31-7b30c3d4e211", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af482d34-4d64-4363-9e1d-e33af9bbb69f", "record_id": "flaws_cloudtrail:0000068:af482d34-4d64-4363-9e1d-e33af9bbb69f", "row_index": 68, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af482d34-4d64-4363-9e1d-e33af9bbb69f", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b8c8c74-419e-41d6-bdaa-c692243d1f74", "record_id": "flaws_cloudtrail:0000069:6b8c8c74-419e-41d6-bdaa-c692243d1f74", "row_index": 69, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b8c8c74-419e-41d6-bdaa-c692243d1f74", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbb08519-3402-47b7-ae4f-2d34b90d4558", "record_id": "flaws_cloudtrail:0000070:bbb08519-3402-47b7-ae4f-2d34b90d4558", "row_index": 70, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbb08519-3402-47b7-ae4f-2d34b90d4558", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6daf579-7a68-4151-9565-d248f00352", "record_id": "flaws_cloudtrail:0000071:f6daf579-7a68-4151-9565-d248f00352", "row_index": 71, "timestamp": "2018-10-10T20:37:23Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6daf579-7a68-4151-9565-d248f00352", "eventTime": "2018-10-10T20:37:23Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "054bc574-4fbb-4d7b-8f51-534ab140895b4", "record_id": "flaws_cloudtrail:0000072:054bc574-4fbb-4d7b-8f51-534ab140895b4", "row_index": 72, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAIX02F248HU03LTCG", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "054bc574-4fbb-4d7b-8f51-534ab140895b4", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIX02F248HU03LTCG", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30bc3ec5-08fb-4d04-a76c-f724caa8ea14", "record_id": "flaws_cloudtrail:0000073:30bc3ec5-08fb-4d04-a76c-f724caa8ea14", "row_index": 73, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30bc3ec5-08fb-4d04-a76c-f724caa8ea14", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8b356e-55dd-45e3-9382-8a7e8f51b102", "record_id": "flaws_cloudtrail:0000074:7a8b356e-55dd-45e3-9382-8a7e8f51b102", "row_index": 74, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8b356e-55dd-45e3-9382-8a7e8f51b102", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe757460-8482-4f55-be6a-1523c1728798", "record_id": "flaws_cloudtrail:0000075:efe757460-8482-4f55-be6a-1523c1728798", "row_index": 75, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe757460-8482-4f55-be6a-1523c1728798", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4082cbba-6d5a-4888-8a85-b8f02e79972", "record_id": "flaws_cloudtrail:0000076:4082cbba-6d5a-4888-8a85-b8f02e79972", "row_index": 76, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4082cbba-6d5a-4888-8a85-b8f02e79972", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8b41a6a-0fce-4f4e-b78f-c69a1ba605e1", "record_id": "flaws_cloudtrail:0000077:f8b41a6a-0fce-4f4e-b78f-c69a1ba605e1", "row_index": 77, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8b41a6a-0fce-4f4e-b78f-c69a1ba605e1", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b22a407-cb4d-43d3-8883-244badd07c0c", "record_id": "flaws_cloudtrail:0000078:8b22a407-cb4d-43d3-8883-244badd07c0c", "row_index": 78, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b22a407-cb4d-43d3-8883-244badd07c0c", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c177ff1d-b26d-436f-ae7c-707e070014c1", "record_id": "flaws_cloudtrail:0000079:c177ff1d-b26d-436f-ae7c-707e070014c1", "row_index": 79, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c177ff1d-b26d-436f-ae7c-707e070014c1", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76719-d34f-4a4d-817e-b5a49ef7751d", "record_id": "flaws_cloudtrail:0000080:76719-d34f-4a4d-817e-b5a49ef7751d", "row_index": 80, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76719-d34f-4a4d-817e-b5a49ef7751d", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb4f2b9a-bb5d-4a35-b679-ff177d2ddae0", "record_id": "flaws_cloudtrail:0000081:bb4f2b9a-bb5d-4a35-b679-ff177d2ddae0", "row_index": 81, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAX2AP0SCU5A2DM91W", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb4f2b9a-bb5d-4a35-b679-ff177d2ddae0", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAX2AP0SCU5A2DM91W", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e68e6ca1-1406-402f-9a35-0e418564fb154", "record_id": "flaws_cloudtrail:0000082:e68e6ca1-1406-402f-9a35-0e418564fb154", "row_index": 82, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e68e6ca1-1406-402f-9a35-0e418564fb154", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab557dcc-bf98-4e4f-b5a1-98467fca899d", "record_id": "flaws_cloudtrail:0000083:ab557dcc-bf98-4e4f-b5a1-98467fca899d", "row_index": 83, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab557dcc-bf98-4e4f-b5a1-98467fca899d", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c7a972b-373e-4e1f-8d0d-f360ecfbf53b", "record_id": "flaws_cloudtrail:0000084:5c7a972b-373e-4e1f-8d0d-f360ecfbf53b", "row_index": 84, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c7a972b-373e-4e1f-8d0d-f360ecfbf53b", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd3d48a-7abd-4244-8b7b-b92d44545f0c", "record_id": "flaws_cloudtrail:0000085:5cd3d48a-7abd-4244-8b7b-b92d44545f0c", "row_index": 85, "timestamp": "2018-10-10T20:37:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd3d48a-7abd-4244-8b7b-b92d44545f0c", "eventTime": "2018-10-10T20:37:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9f2bb79-9d3e-4d84-83d5-61536f3b280", "record_id": "flaws_cloudtrail:0000086:d9f2bb79-9d3e-4d84-83d5-61536f3b280", "row_index": 86, "timestamp": "2018-10-10T20:37:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9f2bb79-9d3e-4d84-83d5-61536f3b280", "eventTime": "2018-10-10T20:37:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a941f17d-dee9-4353-9aed-1ed7abc6c049", "record_id": "flaws_cloudtrail:0000087:a941f17d-dee9-4353-9aed-1ed7abc6c049", "row_index": 87, "timestamp": "2018-10-10T20:37:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a941f17d-dee9-4353-9aed-1ed7abc6c049", "eventTime": "2018-10-10T20:37:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5300e7a9-83c2-45f5-8a60-1fbfe3f260017", "record_id": "flaws_cloudtrail:0000088:5300e7a9-83c2-45f5-8a60-1fbfe3f260017", "row_index": 88, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAFVKRO6BMG8AS6A9M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5300e7a9-83c2-45f5-8a60-1fbfe3f260017", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAFVKRO6BMG8AS6A9M", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62505a0f-88ed-49cd-8cb3-d0c457c1d700", "record_id": "flaws_cloudtrail:0000089:62505a0f-88ed-49cd-8cb3-d0c457c1d700", "row_index": 89, "timestamp": "2018-10-10T20:37:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62505a0f-88ed-49cd-8cb3-d0c457c1d700", "eventTime": "2018-10-10T20:37:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56d37ba-f049-41e8-8071-d201a5d60b89", "record_id": "flaws_cloudtrail:0000090:c56d37ba-f049-41e8-8071-d201a5d60b89", "row_index": 90, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56d37ba-f049-41e8-8071-d201a5d60b89", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530d0abb-d07d-4398-b271-636422c9831c", "record_id": "flaws_cloudtrail:0000091:530d0abb-d07d-4398-b271-636422c9831c", "row_index": 91, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530d0abb-d07d-4398-b271-636422c9831c", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "194cd75f-4165-4f8c-9d60-330b1282adcf", "record_id": "flaws_cloudtrail:0000092:194cd75f-4165-4f8c-9d60-330b1282adcf", "row_index": 92, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "194cd75f-4165-4f8c-9d60-330b1282adcf", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0eec395-45df-4e1c-a437-bc05e7def495", "record_id": "flaws_cloudtrail:0000093:d0eec395-45df-4e1c-a437-bc05e7def495", "row_index": 93, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0eec395-45df-4e1c-a437-bc05e7def495", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21b8434a-7a66-4a06-9176-da95e1659b91", "record_id": "flaws_cloudtrail:0000094:21b8434a-7a66-4a06-9176-da95e1659b91", "row_index": 94, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21b8434a-7a66-4a06-9176-da95e1659b91", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fba0c4f4-1c55-4147-8513-5bee6ec172ea", "record_id": "flaws_cloudtrail:0000095:fba0c4f4-1c55-4147-8513-5bee6ec172ea", "row_index": 95, "timestamp": "2018-10-10T20:37:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fba0c4f4-1c55-4147-8513-5bee6ec172ea", "eventTime": "2018-10-10T20:37:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb9fd59d-cbda-4509-918f-a5d3c8df0366", "record_id": "flaws_cloudtrail:0000096:bb9fd59d-cbda-4509-918f-a5d3c8df0366", "row_index": 96, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb9fd59d-cbda-4509-918f-a5d3c8df0366", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d76cdeba-eb49-46bd-aeb2-ec99569e2f1", "record_id": "flaws_cloudtrail:0000097:d76cdeba-eb49-46bd-aeb2-ec99569e2f1", "row_index": 97, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d76cdeba-eb49-46bd-aeb2-ec99569e2f1", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73af01b8-cf28-497f-bda1-71909f2b915", "record_id": "flaws_cloudtrail:0000098:73af01b8-cf28-497f-bda1-71909f2b915", "row_index": 98, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73af01b8-cf28-497f-bda1-71909f2b915", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f84893d-19e6-4686-aab2-0a23a5f13781", "record_id": "flaws_cloudtrail:0000099:1f84893d-19e6-4686-aab2-0a23a5f13781", "row_index": 99, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f84893d-19e6-4686-aab2-0a23a5f13781", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a3fc09c-1b97-49be-be5b-d1432ede29ae", "record_id": "flaws_cloudtrail:0000100:6a3fc09c-1b97-49be-be5b-d1432ede29ae", "row_index": 100, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a3fc09c-1b97-49be-be5b-d1432ede29ae", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f033826-e018-4c35-b111-1d9359ec51fc", "record_id": "flaws_cloudtrail:0000101:f033826-e018-4c35-b111-1d9359ec51fc", "row_index": 101, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f033826-e018-4c35-b111-1d9359ec51fc", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "168712-9511-4f99-af3f-58e2f74d34d3", "record_id": "flaws_cloudtrail:0000102:168712-9511-4f99-af3f-58e2f74d34d3", "row_index": 102, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "168712-9511-4f99-af3f-58e2f74d34d3", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404d7dff-a980-4ef9-b440-397cae09a963", "record_id": "flaws_cloudtrail:0000103:404d7dff-a980-4ef9-b440-397cae09a963", "row_index": 103, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404d7dff-a980-4ef9-b440-397cae09a963", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a4857b2-36b1-47ab-ac80-725742e02ba8", "record_id": "flaws_cloudtrail:0000104:4a4857b2-36b1-47ab-ac80-725742e02ba8", "row_index": 104, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a4857b2-36b1-47ab-ac80-725742e02ba8", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c3176a-ac69-46d0-9a2c-6f43cce557e2", "record_id": "flaws_cloudtrail:0000105:21c3176a-ac69-46d0-9a2c-6f43cce557e2", "row_index": 105, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c3176a-ac69-46d0-9a2c-6f43cce557e2", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a12458d-aa09-4a07-bf24-e1bea3c9a145", "record_id": "flaws_cloudtrail:0000106:4a12458d-aa09-4a07-bf24-e1bea3c9a145", "row_index": 106, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a12458d-aa09-4a07-bf24-e1bea3c9a145", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e47925cf-8265-443e-8a06-f113b3bd31c5", "record_id": "flaws_cloudtrail:0000107:e47925cf-8265-443e-8a06-f113b3bd31c5", "row_index": 107, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e47925cf-8265-443e-8a06-f113b3bd31c5", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db894b6b-40ec-4cbb-8f98-200935fec5fcd", "record_id": "flaws_cloudtrail:0000108:db894b6b-40ec-4cbb-8f98-200935fec5fcd", "row_index": 108, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db894b6b-40ec-4cbb-8f98-200935fec5fcd", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "931436c9a-3b89-4a41-93a5-58cb69d90e85", "record_id": "flaws_cloudtrail:0000109:931436c9a-3b89-4a41-93a5-58cb69d90e85", "row_index": 109, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "931436c9a-3b89-4a41-93a5-58cb69d90e85", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "222e4209-ef09-4a8e-a6af-d28671809427", "record_id": "flaws_cloudtrail:0000110:222e4209-ef09-4a8e-a6af-d28671809427", "row_index": 110, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "222e4209-ef09-4a8e-a6af-d28671809427", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f40fff52-daeb-4406-a278-42a3153ed660", "record_id": "flaws_cloudtrail:0000111:f40fff52-daeb-4406-a278-42a3153ed660", "row_index": 111, "timestamp": "2018-10-10T20:37:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f40fff52-daeb-4406-a278-42a3153ed660", "eventTime": "2018-10-10T20:37:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18ab270-93f5-469d-8bbd-aa4f52e3a2c3", "record_id": "flaws_cloudtrail:0000112:f18ab270-93f5-469d-8bbd-aa4f52e3a2c3", "row_index": 112, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18ab270-93f5-469d-8bbd-aa4f52e3a2c3", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8972f308-2ad9-402f-8d5e-c87bc3fb03fa", "record_id": "flaws_cloudtrail:0000113:8972f308-2ad9-402f-8d5e-c87bc3fb03fa", "row_index": 113, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8972f308-2ad9-402f-8d5e-c87bc3fb03fa", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b01b3b5-f2a3-4081-bae1-0e546b739f59", "record_id": "flaws_cloudtrail:0000114:9b01b3b5-f2a3-4081-bae1-0e546b739f59", "row_index": 114, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b01b3b5-f2a3-4081-bae1-0e546b739f59", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d1b6d6-e548-48dd-98f9-6902ac706a60", "record_id": "flaws_cloudtrail:0000115:57d1b6d6-e548-48dd-98f9-6902ac706a60", "row_index": 115, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d1b6d6-e548-48dd-98f9-6902ac706a60", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66da92b2-1649-4b7a-a240-3dac74c7d0b6", "record_id": "flaws_cloudtrail:0000116:66da92b2-1649-4b7a-a240-3dac74c7d0b6", "row_index": 116, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66da92b2-1649-4b7a-a240-3dac74c7d0b6", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ea79a5-7b4e-447d-9957-d501744b35c6", "record_id": "flaws_cloudtrail:0000117:d0ea79a5-7b4e-447d-9957-d501744b35c6", "row_index": 117, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ea79a5-7b4e-447d-9957-d501744b35c6", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d6603b-f338-4c3c-9c23-ba19c6b5966b", "record_id": "flaws_cloudtrail:0000118:b6d6603b-f338-4c3c-9c23-ba19c6b5966b", "row_index": 118, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d6603b-f338-4c3c-9c23-ba19c6b5966b", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00c2a989-7555-4899-b1d8-033a4cfea7ea", "record_id": "flaws_cloudtrail:0000119:00c2a989-7555-4899-b1d8-033a4cfea7ea", "row_index": 119, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00c2a989-7555-4899-b1d8-033a4cfea7ea", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8803a843-1bb1-4db8-ab4e-e69b9df570c0", "record_id": "flaws_cloudtrail:0000120:8803a843-1bb1-4db8-ab4e-e69b9df570c0", "row_index": 120, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8803a843-1bb1-4db8-ab4e-e69b9df570c0", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d542e0-3f9d-48cb-aae7-11ab6419ddfe", "record_id": "flaws_cloudtrail:0000121:96d542e0-3f9d-48cb-aae7-11ab6419ddfe", "row_index": 121, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d542e0-3f9d-48cb-aae7-11ab6419ddfe", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c611cbc-a817-4495-bc09-1f49501b13bc", "record_id": "flaws_cloudtrail:0000122:5c611cbc-a817-4495-bc09-1f49501b13bc", "row_index": 122, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c611cbc-a817-4495-bc09-1f49501b13bc", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1922c5d-b63f-42e9-b59d-0748599ac32e", "record_id": "flaws_cloudtrail:0000123:e1922c5d-b63f-42e9-b59d-0748599ac32e", "row_index": 123, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1922c5d-b63f-42e9-b59d-0748599ac32e", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d523285b-8b32-45b7-9e8e-f5cf1fbbafe0", "record_id": "flaws_cloudtrail:0000124:d523285b-8b32-45b7-9e8e-f5cf1fbbafe0", "row_index": 124, "timestamp": "2018-10-10T20:37:25Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d523285b-8b32-45b7-9e8e-f5cf1fbbafe0", "eventTime": "2018-10-10T20:37:25Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3a42c78-955f-440f-9518-7dff9109e245", "record_id": "flaws_cloudtrail:0000125:e3a42c78-955f-440f-9518-7dff9109e245", "row_index": 125, "timestamp": "2018-10-10T20:37:25Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3a42c78-955f-440f-9518-7dff9109e245", "eventTime": "2018-10-10T20:37:25Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d912ecf-ec35-48c2-89a8-b13e6a8f0edd", "record_id": "flaws_cloudtrail:0000126:6d912ecf-ec35-48c2-89a8-b13e6a8f0edd", "row_index": 126, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d912ecf-ec35-48c2-89a8-b13e6a8f0edd", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00cffe2b-97fb-4c7e-955f-8d07dd64213e", "record_id": "flaws_cloudtrail:0000127:00cffe2b-97fb-4c7e-955f-8d07dd64213e", "row_index": 127, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00cffe2b-97fb-4c7e-955f-8d07dd64213e", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "023c2796-8cfa-4fea-99d6-eab288584ad91", "record_id": "flaws_cloudtrail:0000128:023c2796-8cfa-4fea-99d6-eab288584ad91", "row_index": 128, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "023c2796-8cfa-4fea-99d6-eab288584ad91", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e3a8b1-5a9d-4497-a0fc-fbc0b78ceba7", "record_id": "flaws_cloudtrail:0000129:61e3a8b1-5a9d-4497-a0fc-fbc0b78ceba7", "row_index": 129, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e3a8b1-5a9d-4497-a0fc-fbc0b78ceba7", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d64f69e-faca-4e6c-8c39-6e53d992ced4", "record_id": "flaws_cloudtrail:0000130:6d64f69e-faca-4e6c-8c39-6e53d992ced4", "row_index": 130, "timestamp": "2018-10-10T20:37:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d64f69e-faca-4e6c-8c39-6e53d992ced4", "eventTime": "2018-10-10T20:37:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8e2ab0c-d861-46d6-b812-e18d1eb0e3ff", "record_id": "flaws_cloudtrail:0000131:a8e2ab0c-d861-46d6-b812-e18d1eb0e3ff", "row_index": 131, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8e2ab0c-d861-46d6-b812-e18d1eb0e3ff", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0670aed3-6d6a-4510-985e-d684b1db0d1f", "record_id": "flaws_cloudtrail:0000132:0670aed3-6d6a-4510-985e-d684b1db0d1f", "row_index": 132, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0670aed3-6d6a-4510-985e-d684b1db0d1f", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "529db6be-5f4c-4403-9a50-b9307a16d982", "record_id": "flaws_cloudtrail:0000133:529db6be-5f4c-4403-9a50-b9307a16d982", "row_index": 133, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 651, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "529db6be-5f4c-4403-9a50-b9307a16d982", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c36dc29-d8e2-43cd-83ab-b1d66c9da2fd", "record_id": "flaws_cloudtrail:0000134:8c36dc29-d8e2-43cd-83ab-b1d66c9da2fd", "row_index": 134, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c36dc29-d8e2-43cd-83ab-b1d66c9da2fd", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee78a0fd-d13b-444b-9189-1092d706a755", "record_id": "flaws_cloudtrail:0000135:ee78a0fd-d13b-444b-9189-1092d706a755", "row_index": 135, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZWW2HR6UXQ3FTBC4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee78a0fd-d13b-444b-9189-1092d706a755", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZWW2HR6UXQ3FTBC4", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:25Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3702f09f-fcdc-44ff-ab10-5c83e45ab58f", "record_id": "flaws_cloudtrail:0000136:3702f09f-fcdc-44ff-ab10-5c83e45ab58f", "row_index": 136, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3702f09f-fcdc-44ff-ab10-5c83e45ab58f", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "431bc7dc-b261-4f8b-869b-47c1065930c0", "record_id": "flaws_cloudtrail:0000137:431bc7dc-b261-4f8b-869b-47c1065930c0", "row_index": 137, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAPIL2HYDWGMRG9CU8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "431bc7dc-b261-4f8b-869b-47c1065930c0", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAPIL2HYDWGMRG9CU8", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:25Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31868a-a7be-44fd-968f-44cd5a562946", "record_id": "flaws_cloudtrail:0000138:b31868a-a7be-44fd-968f-44cd5a562946", "row_index": 138, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31868a-a7be-44fd-968f-44cd5a562946", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25ded1b-baad-49f8-a121-52f23a202c78", "record_id": "flaws_cloudtrail:0000139:b25ded1b-baad-49f8-a121-52f23a202c78", "row_index": 139, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25ded1b-baad-49f8-a121-52f23a202c78", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2168d4f4-caab-4ed9-8386-f0a2cd66f55b", "record_id": "flaws_cloudtrail:0000140:2168d4f4-caab-4ed9-8386-f0a2cd66f55b", "row_index": 140, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2168d4f4-caab-4ed9-8386-f0a2cd66f55b", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c507444-ff2e-42eb-9b5f-dd0e1f4787ae", "record_id": "flaws_cloudtrail:0000141:2c507444-ff2e-42eb-9b5f-dd0e1f4787ae", "row_index": 141, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c507444-ff2e-42eb-9b5f-dd0e1f4787ae", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e8a055-c1ed-403b-a146-4cce7a92340", "record_id": "flaws_cloudtrail:0000142:06e8a055-c1ed-403b-a146-4cce7a92340", "row_index": 142, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 651, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e8a055-c1ed-403b-a146-4cce7a92340", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03aea55e-f2a6-4ea6-9c4f-3b0b1471dc70", "record_id": "flaws_cloudtrail:0000143:03aea55e-f2a6-4ea6-9c4f-3b0b1471dc70", "row_index": 143, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAMK6I2SGM6B378K5O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03aea55e-f2a6-4ea6-9c4f-3b0b1471dc70", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMK6I2SGM6B378K5O", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:25Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fbac3ba-2831-48fa-bb0d-2a4e9b14e29b", "record_id": "flaws_cloudtrail:0000144:6fbac3ba-2831-48fa-bb0d-2a4e9b14e29b", "row_index": 144, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fbac3ba-2831-48fa-bb0d-2a4e9b14e29b", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd30c11d-0bf7-4682-9e1d-92a7387b570a", "record_id": "flaws_cloudtrail:0000145:bd30c11d-0bf7-4682-9e1d-92a7387b570a", "row_index": 145, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd30c11d-0bf7-4682-9e1d-92a7387b570a", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7a3d8eb-b8c9-4f93-b4b4-227340eecd451", "record_id": "flaws_cloudtrail:0000146:c7a3d8eb-b8c9-4f93-b4b4-227340eecd451", "row_index": 146, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7a3d8eb-b8c9-4f93-b4b4-227340eecd451", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a10c29f3-baa5-4d91-b0c5-f2b508ff6e5b", "record_id": "flaws_cloudtrail:0000147:a10c29f3-baa5-4d91-b0c5-f2b508ff6e5b", "row_index": 147, "timestamp": "2018-10-10T20:37:25Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a10c29f3-baa5-4d91-b0c5-f2b508ff6e5b", "eventTime": "2018-10-10T20:37:25Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d0e4ae-e5b2-4ad2-8afa-286551dee430", "record_id": "flaws_cloudtrail:0000148:34d0e4ae-e5b2-4ad2-8afa-286551dee430", "row_index": 148, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d0e4ae-e5b2-4ad2-8afa-286551dee430", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0ded06b-7379-4752-a16e-f9c4ccdfce64", "record_id": "flaws_cloudtrail:0000149:a0ded06b-7379-4752-a16e-f9c4ccdfce64", "row_index": 149, "timestamp": "2018-10-10T20:37:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0ded06b-7379-4752-a16e-f9c4ccdfce64", "eventTime": "2018-10-10T20:37:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a786132d-ef2f-43cf-a2fa-dcc596c2b640", "record_id": "flaws_cloudtrail:0000150:a786132d-ef2f-43cf-a2fa-dcc596c2b640", "row_index": 150, "timestamp": "2018-10-10T20:37:26Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a786132d-ef2f-43cf-a2fa-dcc596c2b640", "eventTime": "2018-10-10T20:37:26Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4074a4a-0683-4cd8-9715-52f761f9c834", "record_id": "flaws_cloudtrail:0000151:f4074a4a-0683-4cd8-9715-52f761f9c834", "row_index": 151, "timestamp": "2018-10-10T20:37:26Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4074a4a-0683-4cd8-9715-52f761f9c834", "eventTime": "2018-10-10T20:37:26Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adbcceb4-56a4-479c-af8b-76facb1d9509", "record_id": "flaws_cloudtrail:0000152:adbcceb4-56a4-479c-af8b-76facb1d9509", "row_index": 152, "timestamp": "2018-10-10T20:37:26Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adbcceb4-56a4-479c-af8b-76facb1d9509", "eventTime": "2018-10-10T20:37:26Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8951a7-73df-4008-aa72-f4206b1f6d1a", "record_id": "flaws_cloudtrail:0000153:de8951a7-73df-4008-aa72-f4206b1f6d1a", "row_index": 153, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8951a7-73df-4008-aa72-f4206b1f6d1a", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36fdf21a-2e40-42b0-aa20-7b31af5b2d55", "record_id": "flaws_cloudtrail:0000154:36fdf21a-2e40-42b0-aa20-7b31af5b2d55", "row_index": 154, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36fdf21a-2e40-42b0-aa20-7b31af5b2d55", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3a0d587-c7cb-4a90-8e4a-5445d1ef5462", "record_id": "flaws_cloudtrail:0000155:e3a0d587-c7cb-4a90-8e4a-5445d1ef5462", "row_index": 155, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3a0d587-c7cb-4a90-8e4a-5445d1ef5462", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd14018-91c5-44af-a326-586e21a9cd71", "record_id": "flaws_cloudtrail:0000156:1bd14018-91c5-44af-a326-586e21a9cd71", "row_index": 156, "timestamp": "2018-10-10T20:37:27Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd14018-91c5-44af-a326-586e21a9cd71", "eventTime": "2018-10-10T20:37:27Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d15427-4d80-4f9f-8cea-6e0b9676e6e1", "record_id": "flaws_cloudtrail:0000157:c4d15427-4d80-4f9f-8cea-6e0b9676e6e1", "row_index": 157, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d15427-4d80-4f9f-8cea-6e0b9676e6e1", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c78bf2c-b4c2-40f2-bb13-10866c3b", "record_id": "flaws_cloudtrail:0000158:9c78bf2c-b4c2-40f2-bb13-10866c3b", "row_index": 158, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c78bf2c-b4c2-40f2-bb13-10866c3b", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a383b4c-a2e1-490d-8a43-3af805b08a71", "record_id": "flaws_cloudtrail:0000159:6a383b4c-a2e1-490d-8a43-3af805b08a71", "row_index": 159, "timestamp": "2018-10-10T20:37:27Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a383b4c-a2e1-490d-8a43-3af805b08a71", "eventTime": "2018-10-10T20:37:27Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d049389d-43e7-4e40-9df2-59c01332ab7", "record_id": "flaws_cloudtrail:0000160:d049389d-43e7-4e40-9df2-59c01332ab7", "row_index": 160, "timestamp": "2018-10-10T20:37:28Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d049389d-43e7-4e40-9df2-59c01332ab7", "eventTime": "2018-10-10T20:37:28Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb1faaf-3ebf-4f2f-9f27-de417477c8881", "record_id": "flaws_cloudtrail:0000161:bdb1faaf-3ebf-4f2f-9f27-de417477c8881", "row_index": 161, "timestamp": "2018-10-10T20:37:28Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb1faaf-3ebf-4f2f-9f27-de417477c8881", "eventTime": "2018-10-10T20:37:28Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "193bc391-5e91-4b11-b545-531e25a549a7", "record_id": "flaws_cloudtrail:0000162:193bc391-5e91-4b11-b545-531e25a549a7", "row_index": 162, "timestamp": "2018-10-10T20:37:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "193bc391-5e91-4b11-b545-531e25a549a7", "eventTime": "2018-10-10T20:37:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "016111f1c-bc0a-4d5b-8c63-e1ed715ea63a", "record_id": "flaws_cloudtrail:0000163:016111f1c-bc0a-4d5b-8c63-e1ed715ea63a", "row_index": 163, "timestamp": "2018-10-10T20:37:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "016111f1c-bc0a-4d5b-8c63-e1ed715ea63a", "eventTime": "2018-10-10T20:37:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e143907-6e03-4921-bc23-4d1c4e4dbf11", "record_id": "flaws_cloudtrail:0000164:6e143907-6e03-4921-bc23-4d1c4e4dbf11", "row_index": 164, "timestamp": "2018-10-10T20:37:28Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e143907-6e03-4921-bc23-4d1c4e4dbf11", "eventTime": "2018-10-10T20:37:28Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76be4e2b-72f1-4ef4-9891-aa107512b6ff", "record_id": "flaws_cloudtrail:0000165:76be4e2b-72f1-4ef4-9891-aa107512b6ff", "row_index": 165, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76be4e2b-72f1-4ef4-9891-aa107512b6ff", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6793e85-7f56-47e3-9ac7-ec6cd865c738", "record_id": "flaws_cloudtrail:0000166:c6793e85-7f56-47e3-9ac7-ec6cd865c738", "row_index": 166, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6793e85-7f56-47e3-9ac7-ec6cd865c738", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8330b889-9723-4542-bf13-675a6efaa2e9", "record_id": "flaws_cloudtrail:0000167:8330b889-9723-4542-bf13-675a6efaa2e9", "row_index": 167, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8330b889-9723-4542-bf13-675a6efaa2e9", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49cdeb4-9fa3-4d52-8199-243656e0dcd58", "record_id": "flaws_cloudtrail:0000168:a49cdeb4-9fa3-4d52-8199-243656e0dcd58", "row_index": 168, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49cdeb4-9fa3-4d52-8199-243656e0dcd58", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "396ea481-ae98-4893-a077-4218a613e73e", "record_id": "flaws_cloudtrail:0000169:396ea481-ae98-4893-a077-4218a613e73e", "row_index": 169, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "396ea481-ae98-4893-a077-4218a613e73e", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be4520b1-91e2-4a9e-9f1d-9067de2f3b1a", "record_id": "flaws_cloudtrail:0000170:be4520b1-91e2-4a9e-9f1d-9067de2f3b1a", "row_index": 170, "timestamp": "2018-10-10T20:37:29Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be4520b1-91e2-4a9e-9f1d-9067de2f3b1a", "eventTime": "2018-10-10T20:37:29Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d765c137-3dfd-4386-aa7b-2e259c2e9602", "record_id": "flaws_cloudtrail:0000171:d765c137-3dfd-4386-aa7b-2e259c2e9602", "row_index": 171, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d765c137-3dfd-4386-aa7b-2e259c2e9602", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "record_id": "flaws_cloudtrail:0000172:34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "row_index": 172, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "record_id": "flaws_cloudtrail:0000173:34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "row_index": 173, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34ec1a4d-f4b1-4d96-bb45-7a39a19d6c88", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2348fad8-01fe-44b5-8cd3-6a14201", "record_id": "flaws_cloudtrail:0000174:2348fad8-01fe-44b5-8cd3-6a14201", "row_index": 174, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2348fad8-01fe-44b5-8cd3-6a14201", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d567116-1549-4868-8691-9fef089892d5", "record_id": "flaws_cloudtrail:0000175:01d567116-1549-4868-8691-9fef089892d5", "row_index": 175, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d567116-1549-4868-8691-9fef089892d5", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "536ca547-1eb6-43bb-abf6-45e4d7a9ae0e", "record_id": "flaws_cloudtrail:0000176:536ca547-1eb6-43bb-abf6-45e4d7a9ae0e", "row_index": 176, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "536ca547-1eb6-43bb-abf6-45e4d7a9ae0e", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0a0971c-e044-4140-b1d2-14b89570c", "record_id": "flaws_cloudtrail:0000177:d0a0971c-e044-4140-b1d2-14b89570c", "row_index": 177, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0a0971c-e044-4140-b1d2-14b89570c", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274effa2-edc4-4c35-8fb7-23368d81770", "record_id": "flaws_cloudtrail:0000178:274effa2-edc4-4c35-8fb7-23368d81770", "row_index": 178, "timestamp": "2018-10-10T20:37:30Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274effa2-edc4-4c35-8fb7-23368d81770", "eventTime": "2018-10-10T20:37:30Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc510bd8-45b0-4d7c-95f0-0f905817f6a", "record_id": "flaws_cloudtrail:0000179:bc510bd8-45b0-4d7c-95f0-0f905817f6a", "row_index": 179, "timestamp": "2018-10-10T20:37:30Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc510bd8-45b0-4d7c-95f0-0f905817f6a", "eventTime": "2018-10-10T20:37:30Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c663be-1ad8-43ac-ada1-770861ff3", "record_id": "flaws_cloudtrail:0000180:b8c663be-1ad8-43ac-ada1-770861ff3", "row_index": 180, "timestamp": "2018-10-10T20:37:31Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c663be-1ad8-43ac-ada1-770861ff3", "eventTime": "2018-10-10T20:37:31Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e792483a9-2df5-410e-85fb-4f1ec06681b8", "record_id": "flaws_cloudtrail:0000181:e792483a9-2df5-410e-85fb-4f1ec06681b8", "row_index": 181, "timestamp": "2018-10-10T20:37:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e792483a9-2df5-410e-85fb-4f1ec06681b8", "eventTime": "2018-10-10T20:37:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b73077-fbfb-4f65-917e-7a82582425cc", "record_id": "flaws_cloudtrail:0000182:b73077-fbfb-4f65-917e-7a82582425cc", "row_index": 182, "timestamp": "2018-10-10T20:37:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b73077-fbfb-4f65-917e-7a82582425cc", "eventTime": "2018-10-10T20:37:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14233-561a-464b-9e92-694854fb28957", "record_id": "flaws_cloudtrail:0000183:14233-561a-464b-9e92-694854fb28957", "row_index": 183, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14233-561a-464b-9e92-694854fb28957", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0ac2379-03bc-420b-b861-53ad162584", "record_id": "flaws_cloudtrail:0000184:a0ac2379-03bc-420b-b861-53ad162584", "row_index": 184, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0ac2379-03bc-420b-b861-53ad162584", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b4c0bac-ace7-4fb3-82cb-dfda52bc76d8", "record_id": "flaws_cloudtrail:0000185:6b4c0bac-ace7-4fb3-82cb-dfda52bc76d8", "row_index": 185, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b4c0bac-ace7-4fb3-82cb-dfda52bc76d8", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2ca25b-401e-4cde-8d3b-9b2022382bcf", "record_id": "flaws_cloudtrail:0000186:9b2ca25b-401e-4cde-8d3b-9b2022382bcf", "row_index": 186, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2ca25b-401e-4cde-8d3b-9b2022382bcf", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b001786-92cb-492b-b145-4daa278e3c1c", "record_id": "flaws_cloudtrail:0000187:b001786-92cb-492b-b145-4daa278e3c1c", "row_index": 187, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b001786-92cb-492b-b145-4daa278e3c1c", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cd84b4c-b7b4-4f69-a953-73d30fe934e1", "record_id": "flaws_cloudtrail:0000188:0cd84b4c-b7b4-4f69-a953-73d30fe934e1", "row_index": 188, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cd84b4c-b7b4-4f69-a953-73d30fe934e1", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "642826-25bc-4e93-86c5-22a8409b09fe", "record_id": "flaws_cloudtrail:0000189:642826-25bc-4e93-86c5-22a8409b09fe", "row_index": 189, "timestamp": "2018-10-10T20:37:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "642826-25bc-4e93-86c5-22a8409b09fe", "eventTime": "2018-10-10T20:37:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "445322be-a6e3-4674-b2e2-5a377029ab9", "record_id": "flaws_cloudtrail:0000190:445322be-a6e3-4674-b2e2-5a377029ab9", "row_index": 190, "timestamp": "2018-10-10T20:37:33Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "445322be-a6e3-4674-b2e2-5a377029ab9", "eventTime": "2018-10-10T20:37:33Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1984ef09-c4f4-4b52-b7af-e3eecb8a78c5", "record_id": "flaws_cloudtrail:0000191:1984ef09-c4f4-4b52-b7af-e3eecb8a78c5", "row_index": 191, "timestamp": "2018-10-10T20:37:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1984ef09-c4f4-4b52-b7af-e3eecb8a78c5", "eventTime": "2018-10-10T20:37:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22c86b7f-1d26-47dc-9c0c-4e4085687fa2", "record_id": "flaws_cloudtrail:0000192:22c86b7f-1d26-47dc-9c0c-4e4085687fa2", "row_index": 192, "timestamp": "2018-10-10T20:37:33Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22c86b7f-1d26-47dc-9c0c-4e4085687fa2", "eventTime": "2018-10-10T20:37:33Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43dbf139-54b3-486d-b211-6a035ce3dcb7", "record_id": "flaws_cloudtrail:0000193:43dbf139-54b3-486d-b211-6a035ce3dcb7", "row_index": 193, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43dbf139-54b3-486d-b211-6a035ce3dcb7", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c495ce4-e727-4ddd-aba5-4e76abfbc3c0", "record_id": "flaws_cloudtrail:0000194:1c495ce4-e727-4ddd-aba5-4e76abfbc3c0", "row_index": 194, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c495ce4-e727-4ddd-aba5-4e76abfbc3c0", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f6a74c0-b665-4892-8a72-7ee21c7203fc", "record_id": "flaws_cloudtrail:0000195:4f6a74c0-b665-4892-8a72-7ee21c7203fc", "row_index": 195, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f6a74c0-b665-4892-8a72-7ee21c7203fc", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c13afd3-89c6-4c31-8486-e5dcfa0ce337", "record_id": "flaws_cloudtrail:0000196:2c13afd3-89c6-4c31-8486-e5dcfa0ce337", "row_index": 196, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c13afd3-89c6-4c31-8486-e5dcfa0ce337", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86d6edd2-993b-4e71-a6bc-8f2e7e7684e5", "record_id": "flaws_cloudtrail:0000197:86d6edd2-993b-4e71-a6bc-8f2e7e7684e5", "row_index": 197, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86d6edd2-993b-4e71-a6bc-8f2e7e7684e5", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2b2b2f3-e7c5-4304-a2c5-4011cba013fe", "record_id": "flaws_cloudtrail:0000198:c2b2b2f3-e7c5-4304-a2c5-4011cba013fe", "row_index": 198, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2b2b2f3-e7c5-4304-a2c5-4011cba013fe", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75015e2-a7a5-4920-b662-1bae84e7d2e6", "record_id": "flaws_cloudtrail:0000199:75015e2-a7a5-4920-b662-1bae84e7d2e6", "row_index": 199, "timestamp": "2018-10-10T20:37:34Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75015e2-a7a5-4920-b662-1bae84e7d2e6", "eventTime": "2018-10-10T20:37:34Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bc98b3-ad0b-44a7-8367-ad62a61b62e8", "record_id": "flaws_cloudtrail:0000200:b8bc98b3-ad0b-44a7-8367-ad62a61b62e8", "row_index": 200, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bc98b3-ad0b-44a7-8367-ad62a61b62e8", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d69a18-5443-486b-b015-b41daf5367bd", "record_id": "flaws_cloudtrail:0000201:c7d69a18-5443-486b-b015-b41daf5367bd", "row_index": 201, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d69a18-5443-486b-b015-b41daf5367bd", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d80c1e6e-732e-42fd-b74e-4011779c706c", "record_id": "flaws_cloudtrail:0000202:d80c1e6e-732e-42fd-b74e-4011779c706c", "row_index": 202, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d80c1e6e-732e-42fd-b74e-4011779c706c", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df7a3acc-a0d3-48b5-becd-d296b1fe3baa", "record_id": "flaws_cloudtrail:0000203:df7a3acc-a0d3-48b5-becd-d296b1fe3baa", "row_index": 203, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df7a3acc-a0d3-48b5-becd-d296b1fe3baa", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ce3c17-db79-4959-bffc-e7c90f260627", "record_id": "flaws_cloudtrail:0000204:d9ce3c17-db79-4959-bffc-e7c90f260627", "row_index": 204, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ce3c17-db79-4959-bffc-e7c90f260627", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659b5f8f-7c15-4792-a819-1b41e62fca8d", "record_id": "flaws_cloudtrail:0000205:659b5f8f-7c15-4792-a819-1b41e62fca8d", "row_index": 205, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659b5f8f-7c15-4792-a819-1b41e62fca8d", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ad9f4a-2b66-4e90-859b-f68ccb771cc9", "record_id": "flaws_cloudtrail:0000206:65ad9f4a-2b66-4e90-859b-f68ccb771cc9", "row_index": 206, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ad9f4a-2b66-4e90-859b-f68ccb771cc9", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7c328a-ea43-471d-adb4-4bc7de43998", "record_id": "flaws_cloudtrail:0000207:6a7c328a-ea43-471d-adb4-4bc7de43998", "row_index": 207, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7c328a-ea43-471d-adb4-4bc7de43998", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31cb5356-4286-407c-bfb1-913937d320d8f", "record_id": "flaws_cloudtrail:0000208:31cb5356-4286-407c-bfb1-913937d320d8f", "row_index": 208, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31cb5356-4286-407c-bfb1-913937d320d8f", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1890bc3a-4442-4003-9330-a3f83e821ca1", "record_id": "flaws_cloudtrail:0000209:1890bc3a-4442-4003-9330-a3f83e821ca1", "row_index": 209, "timestamp": "2018-10-10T20:37:35Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1890bc3a-4442-4003-9330-a3f83e821ca1", "eventTime": "2018-10-10T20:37:35Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb777020-ba2d-480c-979e-46c5356143b8", "record_id": "flaws_cloudtrail:0000210:fbb777020-ba2d-480c-979e-46c5356143b8", "row_index": 210, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb777020-ba2d-480c-979e-46c5356143b8", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e6d6f3-67c1-415e-be7d-2602b50567cc", "record_id": "flaws_cloudtrail:0000211:86e6d6f3-67c1-415e-be7d-2602b50567cc", "row_index": 211, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e6d6f3-67c1-415e-be7d-2602b50567cc", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34723f7c-d502-45cc-817a-d3f94c663465", "record_id": "flaws_cloudtrail:0000212:34723f7c-d502-45cc-817a-d3f94c663465", "row_index": 212, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34723f7c-d502-45cc-817a-d3f94c663465", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346a0e70-51ec-447d-8a61-2473f2f6b1a7", "record_id": "flaws_cloudtrail:0000213:346a0e70-51ec-447d-8a61-2473f2f6b1a7", "row_index": 213, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346a0e70-51ec-447d-8a61-2473f2f6b1a7", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb4b4874-f149-4a95-a511-6c1da9094efa", "record_id": "flaws_cloudtrail:0000214:bb4b4874-f149-4a95-a511-6c1da9094efa", "row_index": 214, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb4b4874-f149-4a95-a511-6c1da9094efa", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78877d3-6c1d-48b4-b81a-cd6e038af302", "record_id": "flaws_cloudtrail:0000215:f78877d3-6c1d-48b4-b81a-cd6e038af302", "row_index": 215, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78877d3-6c1d-48b4-b81a-cd6e038af302", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c301b21-c90d-41c6-9141-74c16040c", "record_id": "flaws_cloudtrail:0000216:8c301b21-c90d-41c6-9141-74c16040c", "row_index": 216, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c301b21-c90d-41c6-9141-74c16040c", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3061e73-a9e5-4965-85b7-35b9cd44eeac", "record_id": "flaws_cloudtrail:0000217:d3061e73-a9e5-4965-85b7-35b9cd44eeac", "row_index": 217, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA4R4IBACJ3LFXHMGL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3061e73-a9e5-4965-85b7-35b9cd44eeac", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4R4IBACJ3LFXHMGL", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:34Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1650cae4-5877-40a8-bdfd-ac972f1fb46f", "record_id": "flaws_cloudtrail:0000218:1650cae4-5877-40a8-bdfd-ac972f1fb46f", "row_index": 218, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1650cae4-5877-40a8-bdfd-ac972f1fb46f", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d609e3d6-c227-4111-acb6-48356a6", "record_id": "flaws_cloudtrail:0000219:d609e3d6-c227-4111-acb6-48356a6", "row_index": 219, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d609e3d6-c227-4111-acb6-48356a6", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e6d94c-b60b-4d04-b195-437e54025d", "record_id": "flaws_cloudtrail:0000220:f0e6d94c-b60b-4d04-b195-437e54025d", "row_index": 220, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAIY0WVT3DV16MA5L6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e6d94c-b60b-4d04-b195-437e54025d", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIY0WVT3DV16MA5L6", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:36Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "139dd7f4-dca7-4dd9-953e-6615fec7bf89", "record_id": "flaws_cloudtrail:0000221:139dd7f4-dca7-4dd9-953e-6615fec7bf89", "row_index": 221, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "139dd7f4-dca7-4dd9-953e-6615fec7bf89", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d78cf450-6e76-44d8-bfbc-b8f198e404d2", "record_id": "flaws_cloudtrail:0000222:d78cf450-6e76-44d8-bfbc-b8f198e404d2", "row_index": 222, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d78cf450-6e76-44d8-bfbc-b8f198e404d2", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fc938418-fc19-4bcf-9633-50dce556b942", "record_id": "flaws_cloudtrail:0000223:9fc938418-fc19-4bcf-9633-50dce556b942", "row_index": 223, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fc938418-fc19-4bcf-9633-50dce556b942", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce5e1c33-7253-42ac-8309-e438006d5", "record_id": "flaws_cloudtrail:0000224:ce5e1c33-7253-42ac-8309-e438006d5", "row_index": 224, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce5e1c33-7253-42ac-8309-e438006d5", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa704152-fa85-4f4b-b6fa-b4c61cce6719", "record_id": "flaws_cloudtrail:0000225:fa704152-fa85-4f4b-b6fa-b4c61cce6719", "row_index": 225, "timestamp": "2018-10-10T20:37:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa704152-fa85-4f4b-b6fa-b4c61cce6719", "eventTime": "2018-10-10T20:37:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f582bb95-8559-4603-8e49-c38bf5df33cf", "record_id": "flaws_cloudtrail:0000226:f582bb95-8559-4603-8e49-c38bf5df33cf", "row_index": 226, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f582bb95-8559-4603-8e49-c38bf5df33cf", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff52be6-af9c-4a70-b1fa-5246e183d851", "record_id": "flaws_cloudtrail:0000227:8ff52be6-af9c-4a70-b1fa-5246e183d851", "row_index": 227, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff52be6-af9c-4a70-b1fa-5246e183d851", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e6d9e59-282e-4053-8531-2afe8959c6ff", "record_id": "flaws_cloudtrail:0000228:7e6d9e59-282e-4053-8531-2afe8959c6ff", "row_index": 228, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e6d9e59-282e-4053-8531-2afe8959c6ff", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff09c6e-d543-4818-99e0-ddc9da98856a", "record_id": "flaws_cloudtrail:0000229:9ff09c6e-d543-4818-99e0-ddc9da98856a", "row_index": 229, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff09c6e-d543-4818-99e0-ddc9da98856a", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee72aee-816b-49d4-84c9-44417f45c866", "record_id": "flaws_cloudtrail:0000230:8ee72aee-816b-49d4-84c9-44417f45c866", "row_index": 230, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee72aee-816b-49d4-84c9-44417f45c866", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6bab88-4a61-4b34-98bd-dc93e10571cb", "record_id": "flaws_cloudtrail:0000231:1c6bab88-4a61-4b34-98bd-dc93e10571cb", "row_index": 231, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6bab88-4a61-4b34-98bd-dc93e10571cb", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6bfdf6-0ca2-4338-b5c9-ca6c72a62ab4", "record_id": "flaws_cloudtrail:0000232:de6bfdf6-0ca2-4338-b5c9-ca6c72a62ab4", "row_index": 232, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6bfdf6-0ca2-4338-b5c9-ca6c72a62ab4", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e51162-7277-46aa-87c7-934f06b1d339", "record_id": "flaws_cloudtrail:0000233:7e51162-7277-46aa-87c7-934f06b1d339", "row_index": 233, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e51162-7277-46aa-87c7-934f06b1d339", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2dcce14-92e9-4916-9394-80870b038a6f", "record_id": "flaws_cloudtrail:0000234:f2dcce14-92e9-4916-9394-80870b038a6f", "row_index": 234, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2dcce14-92e9-4916-9394-80870b038a6f", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97a093-6ef1-467a-af0c-9b93abf270d8", "record_id": "flaws_cloudtrail:0000235:6a97a093-6ef1-467a-af0c-9b93abf270d8", "row_index": 235, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97a093-6ef1-467a-af0c-9b93abf270d8", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e59306b-699e-4fdb-aa5a-f1ce56c866ba", "record_id": "flaws_cloudtrail:0000236:0e59306b-699e-4fdb-aa5a-f1ce56c866ba", "row_index": 236, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAY65X14D48XXW00OA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e59306b-699e-4fdb-aa5a-f1ce56c866ba", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAY65X14D48XXW00OA", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:37Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb3225b8-c377-44ed-bff2-427bc64df531", "record_id": "flaws_cloudtrail:0000237:bb3225b8-c377-44ed-bff2-427bc64df531", "row_index": 237, "timestamp": "2018-10-10T20:37:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb3225b8-c377-44ed-bff2-427bc64df531", "eventTime": "2018-10-10T20:37:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8ee9f09-84ab-47d7-8cf6-2b3082c7d618", "record_id": "flaws_cloudtrail:0000238:b8ee9f09-84ab-47d7-8cf6-2b3082c7d618", "row_index": 238, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8ee9f09-84ab-47d7-8cf6-2b3082c7d618", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "889678da3-08e3-4f82-81e8-178cb678da2a", "record_id": "flaws_cloudtrail:0000239:889678da3-08e3-4f82-81e8-178cb678da2a", "row_index": 239, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAN4MDP9UJQ02PY956", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "889678da3-08e3-4f82-81e8-178cb678da2a", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAN4MDP9UJQ02PY956", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:36Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce4600e-cc39-4d57-8de6-b07e81a74afc", "record_id": "flaws_cloudtrail:0000240:2ce4600e-cc39-4d57-8de6-b07e81a74afc", "row_index": 240, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce4600e-cc39-4d57-8de6-b07e81a74afc", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0206de3-2a7a-4943-a93e-d9757493d62e", "record_id": "flaws_cloudtrail:0000241:e0206de3-2a7a-4943-a93e-d9757493d62e", "row_index": 241, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0206de3-2a7a-4943-a93e-d9757493d62e", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "350c2e59-002e-4eb0-9df0-26c3f787c5ea", "record_id": "flaws_cloudtrail:0000242:350c2e59-002e-4eb0-9df0-26c3f787c5ea", "row_index": 242, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "350c2e59-002e-4eb0-9df0-26c3f787c5ea", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158681e2-b73d-4c5c-a98f-f735a97526bb", "record_id": "flaws_cloudtrail:0000243:158681e2-b73d-4c5c-a98f-f735a97526bb", "row_index": 243, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158681e2-b73d-4c5c-a98f-f735a97526bb", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd843597-c487-4837-80f5-ab17b904c99f", "record_id": "flaws_cloudtrail:0000244:bd843597-c487-4837-80f5-ab17b904c99f", "row_index": 244, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd843597-c487-4837-80f5-ab17b904c99f", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20b97e05-685c-461b-9310-f1b487f34c87", "record_id": "flaws_cloudtrail:0000245:20b97e05-685c-461b-9310-f1b487f34c87", "row_index": 245, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20b97e05-685c-461b-9310-f1b487f34c87", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97bd1f23-2f85-4327-b4cf-b154566e660e", "record_id": "flaws_cloudtrail:0000246:97bd1f23-2f85-4327-b4cf-b154566e660e", "row_index": 246, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97bd1f23-2f85-4327-b4cf-b154566e660e", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07fa91a3-80ba-4260-8120-2cdd8969f35f", "record_id": "flaws_cloudtrail:0000247:07fa91a3-80ba-4260-8120-2cdd8969f35f", "row_index": 247, "timestamp": "2018-10-10T20:37:38Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 649, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07fa91a3-80ba-4260-8120-2cdd8969f35f", "eventTime": "2018-10-10T20:37:38Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206df658-e2a1-4ad5-a9c5-d122271", "record_id": "flaws_cloudtrail:0000248:206df658-e2a1-4ad5-a9c5-d122271", "row_index": 248, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206df658-e2a1-4ad5-a9c5-d122271", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e00ca4d3-9c62-4b01-b913-845fecd454cc", "record_id": "flaws_cloudtrail:0000249:e00ca4d3-9c62-4b01-b913-845fecd454cc", "row_index": 249, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e00ca4d3-9c62-4b01-b913-845fecd454cc", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6428ba52-9899-4f7b-afcb-1c8c7f709acc", "record_id": "flaws_cloudtrail:0000250:6428ba52-9899-4f7b-afcb-1c8c7f709acc", "row_index": 250, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6428ba52-9899-4f7b-afcb-1c8c7f709acc", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f23b72c-5602-4fe5-93f3-e5689e116e05", "record_id": "flaws_cloudtrail:0000251:0f23b72c-5602-4fe5-93f3-e5689e116e05", "row_index": 251, "timestamp": "2018-10-10T20:37:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f23b72c-5602-4fe5-93f3-e5689e116e05", "eventTime": "2018-10-10T20:37:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e660239-42f9-4aa5-8178-29786b152c", "record_id": "flaws_cloudtrail:0000252:4e660239-42f9-4aa5-8178-29786b152c", "row_index": 252, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e660239-42f9-4aa5-8178-29786b152c", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e8aded0-5a92-467b-ae0e-b7e5e2bd4e1e", "record_id": "flaws_cloudtrail:0000253:2e8aded0-5a92-467b-ae0e-b7e5e2bd4e1e", "row_index": 253, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAHA5K3S0DGZ975KR1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e8aded0-5a92-467b-ae0e-b7e5e2bd4e1e", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAHA5K3S0DGZ975KR1", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:39Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa76ab5-aa9c-4f0c-948d-536224a94fed", "record_id": "flaws_cloudtrail:0000254:eaa76ab5-aa9c-4f0c-948d-536224a94fed", "row_index": 254, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa76ab5-aa9c-4f0c-948d-536224a94fed", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a6a7769-ada8-44bf-85df-7fd4218e9b24", "record_id": "flaws_cloudtrail:0000255:5a6a7769-ada8-44bf-85df-7fd4218e9b24", "row_index": 255, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a6a7769-ada8-44bf-85df-7fd4218e9b24", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f6ce363-ecee-4923-a60c-20bdcee8fcaa", "record_id": "flaws_cloudtrail:0000256:7f6ce363-ecee-4923-a60c-20bdcee8fcaa", "row_index": 256, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f6ce363-ecee-4923-a60c-20bdcee8fcaa", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fee6063a-69b6-490a-88da-242c4ec3a960", "record_id": "flaws_cloudtrail:0000257:fee6063a-69b6-490a-88da-242c4ec3a960", "row_index": 257, "timestamp": "2018-10-10T20:37:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fee6063a-69b6-490a-88da-242c4ec3a960", "eventTime": "2018-10-10T20:37:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a172165b7-cc76-427d-a3cc-584634e21d16", "record_id": "flaws_cloudtrail:0000258:a172165b7-cc76-427d-a3cc-584634e21d16", "row_index": 258, "timestamp": "2018-10-10T20:37:39Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a172165b7-cc76-427d-a3cc-584634e21d16", "eventTime": "2018-10-10T20:37:39Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f287eea-f7e4-4070-a750-a7a2ed51460d", "record_id": "flaws_cloudtrail:0000259:0f287eea-f7e4-4070-a750-a7a2ed51460d", "row_index": 259, "timestamp": "2018-10-10T20:37:39Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f287eea-f7e4-4070-a750-a7a2ed51460d", "eventTime": "2018-10-10T20:37:39Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd805f5-d6f4-41ab-9f65-35bd60f00cb7", "record_id": "flaws_cloudtrail:0000260:4cd805f5-d6f4-41ab-9f65-35bd60f00cb7", "row_index": 260, "timestamp": "2018-10-10T20:37:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd805f5-d6f4-41ab-9f65-35bd60f00cb7", "eventTime": "2018-10-10T20:37:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e257ce-a9e7-42f7-9e96-32cad6fe8a4e", "record_id": "flaws_cloudtrail:0000261:61e257ce-a9e7-42f7-9e96-32cad6fe8a4e", "row_index": 261, "timestamp": "2018-10-10T20:37:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e257ce-a9e7-42f7-9e96-32cad6fe8a4e", "eventTime": "2018-10-10T20:37:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1709a107-12af-41b1-ad72-8c8e8cf0879e", "record_id": "flaws_cloudtrail:0000262:1709a107-12af-41b1-ad72-8c8e8cf0879e", "row_index": 262, "timestamp": "2018-10-10T20:37:40Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA9C05LFIUD8P7ZWAR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1709a107-12af-41b1-ad72-8c8e8cf0879e", "eventTime": "2018-10-10T20:37:40Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9C05LFIUD8P7ZWAR", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:36Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "522e0302-6feb-4fa8-ae08-f26a25cac5f2", "record_id": "flaws_cloudtrail:0000263:522e0302-6feb-4fa8-ae08-f26a25cac5f2", "row_index": 263, "timestamp": "2018-10-10T20:37:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "522e0302-6feb-4fa8-ae08-f26a25cac5f2", "eventTime": "2018-10-10T20:37:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c0fea75-4727-4cf9-8780-d8583dc1e2a0", "record_id": "flaws_cloudtrail:0000264:7c0fea75-4727-4cf9-8780-d8583dc1e2a0", "row_index": 264, "timestamp": "2018-10-10T20:37:40Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 651, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c0fea75-4727-4cf9-8780-d8583dc1e2a0", "eventTime": "2018-10-10T20:37:40Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84dead8c-c5ee-4c63-96e6-8b3692e720dd", "record_id": "flaws_cloudtrail:0000265:84dead8c-c5ee-4c63-96e6-8b3692e720dd", "row_index": 265, "timestamp": "2018-10-10T20:37:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84dead8c-c5ee-4c63-96e6-8b3692e720dd", "eventTime": "2018-10-10T20:37:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1eb117a-3952-4e8c-ac63-10df4c368d26", "record_id": "flaws_cloudtrail:0000266:b1eb117a-3952-4e8c-ac63-10df4c368d26", "row_index": 266, "timestamp": "2018-10-10T20:37:41Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1eb117a-3952-4e8c-ac63-10df4c368d26", "eventTime": "2018-10-10T20:37:41Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ff49fb0-7b84-497c-b294-499e9ef5ddbd", "record_id": "flaws_cloudtrail:0000267:5ff49fb0-7b84-497c-b294-499e9ef5ddbd", "row_index": 267, "timestamp": "2018-10-10T20:37:41Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ff49fb0-7b84-497c-b294-499e9ef5ddbd", "eventTime": "2018-10-10T20:37:41Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78665d6-07e3-4e29-abd1-ffd391bc088a", "record_id": "flaws_cloudtrail:0000268:f78665d6-07e3-4e29-abd1-ffd391bc088a", "row_index": 268, "timestamp": "2018-10-10T20:37:41Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78665d6-07e3-4e29-abd1-ffd391bc088a", "eventTime": "2018-10-10T20:37:41Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc8cd938-4449-4685-8f50-f8bc7122de81", "record_id": "flaws_cloudtrail:0000269:bc8cd938-4449-4685-8f50-f8bc7122de81", "row_index": 269, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc8cd938-4449-4685-8f50-f8bc7122de81", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12bc0005-275b-4f4a-8be8-d6ff46cff048", "record_id": "flaws_cloudtrail:0000270:12bc0005-275b-4f4a-8be8-d6ff46cff048", "row_index": 270, "timestamp": "2018-10-10T20:37:42Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12bc0005-275b-4f4a-8be8-d6ff46cff048", "eventTime": "2018-10-10T20:37:42Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14c1179-0e75-41e1-91c5-3847d18a665e", "record_id": "flaws_cloudtrail:0000271:e14c1179-0e75-41e1-91c5-3847d18a665e", "row_index": 271, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14c1179-0e75-41e1-91c5-3847d18a665e", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16f712660-9245-41f6-8fef-7ac53efd06e5", "record_id": "flaws_cloudtrail:0000272:16f712660-9245-41f6-8fef-7ac53efd06e5", "row_index": 272, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16f712660-9245-41f6-8fef-7ac53efd06e5", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb32f129-145a-48e4-a7a7-f4bc438d41cf", "record_id": "flaws_cloudtrail:0000273:eb32f129-145a-48e4-a7a7-f4bc438d41cf", "row_index": 273, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb32f129-145a-48e4-a7a7-f4bc438d41cf", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6d1a8e8-5799-4257-b815-b252c6416cb2", "record_id": "flaws_cloudtrail:0000274:f6d1a8e8-5799-4257-b815-b252c6416cb2", "row_index": 274, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6d1a8e8-5799-4257-b815-b252c6416cb2", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be809fa6-1dc9-4515-88a8-ea678f608393", "record_id": "flaws_cloudtrail:0000275:be809fa6-1dc9-4515-88a8-ea678f608393", "row_index": 275, "timestamp": "2018-10-10T20:37:42Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be809fa6-1dc9-4515-88a8-ea678f608393", "eventTime": "2018-10-10T20:37:42Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca2384d7-d7aa-4df5-9068-a065b07f430e", "record_id": "flaws_cloudtrail:0000276:ca2384d7-d7aa-4df5-9068-a065b07f430e", "row_index": 276, "timestamp": "2018-10-10T20:37:43Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca2384d7-d7aa-4df5-9068-a065b07f430e", "eventTime": "2018-10-10T20:37:43Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1119bbe6-4cdb-499c-a147-006fa0d68546", "record_id": "flaws_cloudtrail:0000277:1119bbe6-4cdb-499c-a147-006fa0d68546", "row_index": 277, "timestamp": "2018-10-10T20:37:43Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1119bbe6-4cdb-499c-a147-006fa0d68546", "eventTime": "2018-10-10T20:37:43Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17573bfb-34e8-4fbf-b6a3-b1bb2b6e008e", "record_id": "flaws_cloudtrail:0000278:17573bfb-34e8-4fbf-b6a3-b1bb2b6e008e", "row_index": 278, "timestamp": "2018-10-10T20:37:43Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17573bfb-34e8-4fbf-b6a3-b1bb2b6e008e", "eventTime": "2018-10-10T20:37:43Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9137ef6-c5a7-47a2-ad45-44a8de7c07cd", "record_id": "flaws_cloudtrail:0000279:a9137ef6-c5a7-47a2-ad45-44a8de7c07cd", "row_index": 279, "timestamp": "2018-10-10T20:37:43Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9137ef6-c5a7-47a2-ad45-44a8de7c07cd", "eventTime": "2018-10-10T20:37:43Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "782d1c79-14df-4961-a081-4705dd2de61e", "record_id": "flaws_cloudtrail:0000280:782d1c79-14df-4961-a081-4705dd2de61e", "row_index": 280, "timestamp": "2018-10-10T20:37:44Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "782d1c79-14df-4961-a081-4705dd2de61e", "eventTime": "2018-10-10T20:37:44Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40dbdfc2-61ae-4a42-8c07-e12c857958a4", "record_id": "flaws_cloudtrail:0000281:40dbdfc2-61ae-4a42-8c07-e12c857958a4", "row_index": 281, "timestamp": "2018-10-10T20:37:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40dbdfc2-61ae-4a42-8c07-e12c857958a4", "eventTime": "2018-10-10T20:37:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2dc60d4-63ac-452f-8bbd-18138c571691", "record_id": "flaws_cloudtrail:0000282:a2dc60d4-63ac-452f-8bbd-18138c571691", "row_index": 282, "timestamp": "2018-10-10T20:37:44Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2dc60d4-63ac-452f-8bbd-18138c571691", "eventTime": "2018-10-10T20:37:44Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcddf96d-2308-422f-ac8d-7ea25d571e42", "record_id": "flaws_cloudtrail:0000283:dcddf96d-2308-422f-ac8d-7ea25d571e42", "row_index": 283, "timestamp": "2018-10-10T20:37:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcddf96d-2308-422f-ac8d-7ea25d571e42", "eventTime": "2018-10-10T20:37:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6827edb4-6ba2-477e-bfa0-97ffcdb0d24b", "record_id": "flaws_cloudtrail:0000284:6827edb4-6ba2-477e-bfa0-97ffcdb0d24b", "row_index": 284, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6827edb4-6ba2-477e-bfa0-97ffcdb0d24b", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55f68d28-4deb-4022-a4cc-90271e284cce", "record_id": "flaws_cloudtrail:0000285:55f68d28-4deb-4022-a4cc-90271e284cce", "row_index": 285, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55f68d28-4deb-4022-a4cc-90271e284cce", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc85e954-501b-45a2-9370-bafc58d04334", "record_id": "flaws_cloudtrail:0000286:cc85e954-501b-45a2-9370-bafc58d04334", "row_index": 286, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc85e954-501b-45a2-9370-bafc58d04334", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c3db4c-3c88-4492-b2d8-31036f1cfbba", "record_id": "flaws_cloudtrail:0000287:e8c3db4c-3c88-4492-b2d8-31036f1cfbba", "row_index": 287, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c3db4c-3c88-4492-b2d8-31036f1cfbba", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1bbdbe-6818-4531-98f4-a4af33cbf5c9", "record_id": "flaws_cloudtrail:0000288:7e1bbdbe-6818-4531-98f4-a4af33cbf5c9", "row_index": 288, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1bbdbe-6818-4531-98f4-a4af33cbf5c9", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5a6d883-42a5-46f3-8cb9-ba39530ea3", "record_id": "flaws_cloudtrail:0000289:f5a6d883-42a5-46f3-8cb9-ba39530ea3", "row_index": 289, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5a6d883-42a5-46f3-8cb9-ba39530ea3", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c11f50-d11f-419c-a35e-1c92de499075", "record_id": "flaws_cloudtrail:0000290:80c11f50-d11f-419c-a35e-1c92de499075", "row_index": 290, "timestamp": "2018-10-10T20:37:45Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c11f50-d11f-419c-a35e-1c92de499075", "eventTime": "2018-10-10T20:37:45Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73f0964-fdda-4709-8d4d-3fbf694860e6", "record_id": "flaws_cloudtrail:0000291:f73f0964-fdda-4709-8d4d-3fbf694860e6", "row_index": 291, "timestamp": "2018-10-10T20:37:46Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73f0964-fdda-4709-8d4d-3fbf694860e6", "eventTime": "2018-10-10T20:37:46Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e09793f-5afe-4064-940c-2554ccf6965b", "record_id": "flaws_cloudtrail:0000292:e09793f-5afe-4064-940c-2554ccf6965b", "row_index": 292, "timestamp": "2018-10-10T20:37:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e09793f-5afe-4064-940c-2554ccf6965b", "eventTime": "2018-10-10T20:37:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a14ab7a-3cba-4844-bd4e-e386ea8ffed0", "record_id": "flaws_cloudtrail:0000293:5a14ab7a-3cba-4844-bd4e-e386ea8ffed0", "row_index": 293, "timestamp": "2018-10-10T20:37:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a14ab7a-3cba-4844-bd4e-e386ea8ffed0", "eventTime": "2018-10-10T20:37:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96fe555-ffce-4122-909c-4fc1743d4e59", "record_id": "flaws_cloudtrail:0000294:e96fe555-ffce-4122-909c-4fc1743d4e59", "row_index": 294, "timestamp": "2018-10-10T20:37:46Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96fe555-ffce-4122-909c-4fc1743d4e59", "eventTime": "2018-10-10T20:37:46Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "292cd35d-954a-4cae-9286-62cd488455de7", "record_id": "flaws_cloudtrail:0000295:292cd35d-954a-4cae-9286-62cd488455de7", "row_index": 295, "timestamp": "2018-10-10T20:37:47Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "292cd35d-954a-4cae-9286-62cd488455de7", "eventTime": "2018-10-10T20:37:47Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36be9861-f859-439a-a131-29b4c769541d", "record_id": "flaws_cloudtrail:0000296:36be9861-f859-439a-a131-29b4c769541d", "row_index": 296, "timestamp": "2018-10-10T20:37:47Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36be9861-f859-439a-a131-29b4c769541d", "eventTime": "2018-10-10T20:37:47Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "245b5b60-c565-4903-8823-02c001de8ae8", "record_id": "flaws_cloudtrail:0000297:245b5b60-c565-4903-8823-02c001de8ae8", "row_index": 297, "timestamp": "2018-10-10T20:37:47Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "245b5b60-c565-4903-8823-02c001de8ae8", "eventTime": "2018-10-10T20:37:47Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d022bcd-08b1-4713-ac80-84151d156f53", "record_id": "flaws_cloudtrail:0000298:7d022bcd-08b1-4713-ac80-84151d156f53", "row_index": 298, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d022bcd-08b1-4713-ac80-84151d156f53", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8121c60c-0757-4350-8035-f232847b2", "record_id": "flaws_cloudtrail:0000299:8121c60c-0757-4350-8035-f232847b2", "row_index": 299, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8121c60c-0757-4350-8035-f232847b2", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dabda28-d9bc-4bd8-a318-6a2fdc79105", "record_id": "flaws_cloudtrail:0000300:3dabda28-d9bc-4bd8-a318-6a2fdc79105", "row_index": 300, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dabda28-d9bc-4bd8-a318-6a2fdc79105", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416ecd8a-5e4a-4ba8-a34f-3f5187e7abdb", "record_id": "flaws_cloudtrail:0000301:416ecd8a-5e4a-4ba8-a34f-3f5187e7abdb", "row_index": 301, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416ecd8a-5e4a-4ba8-a34f-3f5187e7abdb", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afe2fc21-c583-4313-900b-95c917fd29e6", "record_id": "flaws_cloudtrail:0000302:afe2fc21-c583-4313-900b-95c917fd29e6", "row_index": 302, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afe2fc21-c583-4313-900b-95c917fd29e6", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0835c7-a702-4702-af84-5b656e079a30", "record_id": "flaws_cloudtrail:0000303:6c0835c7-a702-4702-af84-5b656e079a30", "row_index": 303, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0835c7-a702-4702-af84-5b656e079a30", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c587d58d-a2e0-47ef-a2e1-eeb30ef286fc", "record_id": "flaws_cloudtrail:0000304:c587d58d-a2e0-47ef-a2e1-eeb30ef286fc", "row_index": 304, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c587d58d-a2e0-47ef-a2e1-eeb30ef286fc", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c105998-e211-4126-a94f-36e8689aeaec", "record_id": "flaws_cloudtrail:0000305:f9c105998-e211-4126-a94f-36e8689aeaec", "row_index": 305, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAU09DGQZSU6JXBD7O", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c105998-e211-4126-a94f-36e8689aeaec", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAU09DGQZSU6JXBD7O", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e5b296-b695-4619-bdaa-8d0555176e9f", "record_id": "flaws_cloudtrail:0000306:05e5b296-b695-4619-bdaa-8d0555176e9f", "row_index": 306, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e5b296-b695-4619-bdaa-8d0555176e9f", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe4252d3-ba75-48b3-a5f9-dc1a32002c4", "record_id": "flaws_cloudtrail:0000307:fe4252d3-ba75-48b3-a5f9-dc1a32002c4", "row_index": 307, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe4252d3-ba75-48b3-a5f9-dc1a32002c4", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d71e5b5-3d67-4300-83ba-d823a65f739d", "record_id": "flaws_cloudtrail:0000308:5d71e5b5-3d67-4300-83ba-d823a65f739d", "row_index": 308, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d71e5b5-3d67-4300-83ba-d823a65f739d", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8790ced8-a5d6-418a-b1c3-ea9f3748a85c", "record_id": "flaws_cloudtrail:0000309:8790ced8-a5d6-418a-b1c3-ea9f3748a85c", "row_index": 309, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAQC4A7LPJJXZUPTHQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8790ced8-a5d6-418a-b1c3-ea9f3748a85c", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAQC4A7LPJJXZUPTHQ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2ace03-404f-4818-94d0-5eb50166b", "record_id": "flaws_cloudtrail:0000310:3c2ace03-404f-4818-94d0-5eb50166b", "row_index": 310, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2ace03-404f-4818-94d0-5eb50166b", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20dd43e8-bbd6-49a1-a388-b687c595786", "record_id": "flaws_cloudtrail:0000311:20dd43e8-bbd6-49a1-a388-b687c595786", "row_index": 311, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20dd43e8-bbd6-49a1-a388-b687c595786", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbae9ff-892b-4b3e-a492-d516de62ec73", "record_id": "flaws_cloudtrail:0000312:ebbae9ff-892b-4b3e-a492-d516de62ec73", "row_index": 312, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbae9ff-892b-4b3e-a492-d516de62ec73", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec86e80d-a0d8-46a0-bfbf-31fcb6d222b8", "record_id": "flaws_cloudtrail:0000313:ec86e80d-a0d8-46a0-bfbf-31fcb6d222b8", "row_index": 313, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec86e80d-a0d8-46a0-bfbf-31fcb6d222b8", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dd47c13-fbc2-4a24-821a-579c4b54c257", "record_id": "flaws_cloudtrail:0000314:8dd47c13-fbc2-4a24-821a-579c4b54c257", "row_index": 314, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dd47c13-fbc2-4a24-821a-579c4b54c257", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "655d573f-ed6f-49d7-b51f-080ae898106f", "record_id": "flaws_cloudtrail:0000315:655d573f-ed6f-49d7-b51f-080ae898106f", "row_index": 315, "timestamp": "2018-10-10T20:37:48Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "655d573f-ed6f-49d7-b51f-080ae898106f", "eventTime": "2018-10-10T20:37:48Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a08297-35ac-4427-9c5e-6c1eccb7a647", "record_id": "flaws_cloudtrail:0000316:2a08297-35ac-4427-9c5e-6c1eccb7a647", "row_index": 316, "timestamp": "2018-10-10T20:37:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a08297-35ac-4427-9c5e-6c1eccb7a647", "eventTime": "2018-10-10T20:37:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97b2849d-667b-4fe4-b2ac-894ef39a140d", "record_id": "flaws_cloudtrail:0000317:97b2849d-667b-4fe4-b2ac-894ef39a140d", "row_index": 317, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97b2849d-667b-4fe4-b2ac-894ef39a140d", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23cda862-c04d-416e-adf9-836d911b795c", "record_id": "flaws_cloudtrail:0000318:23cda862-c04d-416e-adf9-836d911b795c", "row_index": 318, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23cda862-c04d-416e-adf9-836d911b795c", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d64a02a-df72-4839-85f7-2acc7a15d12f", "record_id": "flaws_cloudtrail:0000319:6d64a02a-df72-4839-85f7-2acc7a15d12f", "row_index": 319, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d64a02a-df72-4839-85f7-2acc7a15d12f", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5459c22-df92-4ddf-8cb0-f30c333032a2f", "record_id": "flaws_cloudtrail:0000320:f5459c22-df92-4ddf-8cb0-f30c333032a2f", "row_index": 320, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIATRSBRVLH54K0S1PH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5459c22-df92-4ddf-8cb0-f30c333032a2f", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIATRSBRVLH54K0S1PH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef28128-fbde-46ba-aeeb-919d6cdc5910", "record_id": "flaws_cloudtrail:0000321:2ef28128-fbde-46ba-aeeb-919d6cdc5910", "row_index": 321, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef28128-fbde-46ba-aeeb-919d6cdc5910", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce34e643-06b1-4be5-bff8-43cb9588b38b", "record_id": "flaws_cloudtrail:0000322:ce34e643-06b1-4be5-bff8-43cb9588b38b", "row_index": 322, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce34e643-06b1-4be5-bff8-43cb9588b38b", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "706312-6fbe-4f0a-bd77-410331dfe3684", "record_id": "flaws_cloudtrail:0000323:706312-6fbe-4f0a-bd77-410331dfe3684", "row_index": 323, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "706312-6fbe-4f0a-bd77-410331dfe3684", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "931069-caca-41dc-b13e-4fccd1d251b2", "record_id": "flaws_cloudtrail:0000324:931069-caca-41dc-b13e-4fccd1d251b2", "row_index": 324, "timestamp": "2018-10-10T20:37:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "931069-caca-41dc-b13e-4fccd1d251b2", "eventTime": "2018-10-10T20:37:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff364e68-8734-42b8-a128-b12bd7a1b98b", "record_id": "flaws_cloudtrail:0000325:ff364e68-8734-42b8-a128-b12bd7a1b98b", "row_index": 325, "timestamp": "2018-10-10T20:37:50Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff364e68-8734-42b8-a128-b12bd7a1b98b", "eventTime": "2018-10-10T20:37:50Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6db0b09-94c4-4801-9f39-e1955d2142ce", "record_id": "flaws_cloudtrail:0000326:e6db0b09-94c4-4801-9f39-e1955d2142ce", "row_index": 326, "timestamp": "2018-10-10T20:37:50Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6db0b09-94c4-4801-9f39-e1955d2142ce", "eventTime": "2018-10-10T20:37:50Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e277482a1-abca-4c30-9a88-e6d62bc6287d", "record_id": "flaws_cloudtrail:0000327:e277482a1-abca-4c30-9a88-e6d62bc6287d", "row_index": 327, "timestamp": "2018-10-10T20:37:50Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e277482a1-abca-4c30-9a88-e6d62bc6287d", "eventTime": "2018-10-10T20:37:50Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45725-1889-4a2d-99db-06390818184b", "record_id": "flaws_cloudtrail:0000328:45725-1889-4a2d-99db-06390818184b", "row_index": 328, "timestamp": "2018-10-10T20:37:50Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45725-1889-4a2d-99db-06390818184b", "eventTime": "2018-10-10T20:37:50Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bceec2d-b63a-4da3-83ba-08711baa9fe6", "record_id": "flaws_cloudtrail:0000329:2bceec2d-b63a-4da3-83ba-08711baa9fe6", "row_index": 329, "timestamp": "2018-10-10T20:37:50Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bceec2d-b63a-4da3-83ba-08711baa9fe6", "eventTime": "2018-10-10T20:37:50Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "183befa6-3d1f-47ab-bb3f-451a139a75c2", "record_id": "flaws_cloudtrail:0000330:183befa6-3d1f-47ab-bb3f-451a139a75c2", "row_index": 330, "timestamp": "2018-10-10T20:37:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "183befa6-3d1f-47ab-bb3f-451a139a75c2", "eventTime": "2018-10-10T20:37:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1b4970-9a9c-4ecc-af37-0ec167cb1ba3", "record_id": "flaws_cloudtrail:0000331:ab1b4970-9a9c-4ecc-af37-0ec167cb1ba3", "row_index": 331, "timestamp": "2018-10-10T20:37:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1b4970-9a9c-4ecc-af37-0ec167cb1ba3", "eventTime": "2018-10-10T20:37:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fc41bb-359b-460a-ba28-f26e61d0fa30", "record_id": "flaws_cloudtrail:0000332:d8fc41bb-359b-460a-ba28-f26e61d0fa30", "row_index": 332, "timestamp": "2018-10-10T20:37:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fc41bb-359b-460a-ba28-f26e61d0fa30", "eventTime": "2018-10-10T20:37:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81589b57-648a-4458-8650-b57755bb2bd", "record_id": "flaws_cloudtrail:0000333:81589b57-648a-4458-8650-b57755bb2bd", "row_index": 333, "timestamp": "2018-10-10T20:37:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81589b57-648a-4458-8650-b57755bb2bd", "eventTime": "2018-10-10T20:37:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91926f8c-7c92-4b11-b11c-1b0a1b64e58f", "record_id": "flaws_cloudtrail:0000334:91926f8c-7c92-4b11-b11c-1b0a1b64e58f", "row_index": 334, "timestamp": "2018-10-10T20:37:50Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91926f8c-7c92-4b11-b11c-1b0a1b64e58f", "eventTime": "2018-10-10T20:37:50Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "424a2bcd-51e3-46ba-9103-97c085a27216", "record_id": "flaws_cloudtrail:0000335:424a2bcd-51e3-46ba-9103-97c085a27216", "row_index": 335, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "424a2bcd-51e3-46ba-9103-97c085a27216", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5fca859-c9b2-4205-a241-06ef520ef910", "record_id": "flaws_cloudtrail:0000336:f5fca859-c9b2-4205-a241-06ef520ef910", "row_index": 336, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5fca859-c9b2-4205-a241-06ef520ef910", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a94669-9fa1-46bf-b7cf-9bc728d2e83a", "record_id": "flaws_cloudtrail:0000337:e4a94669-9fa1-46bf-b7cf-9bc728d2e83a", "row_index": 337, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a94669-9fa1-46bf-b7cf-9bc728d2e83a", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82379ba8-f0dc-441d-8146-ba8003af04f0", "record_id": "flaws_cloudtrail:0000338:82379ba8-f0dc-441d-8146-ba8003af04f0", "row_index": 338, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82379ba8-f0dc-441d-8146-ba8003af04f0", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8200b4f-bb58-4cd2-b209-fa20d2a6fc20", "record_id": "flaws_cloudtrail:0000339:d8200b4f-bb58-4cd2-b209-fa20d2a6fc20", "row_index": 339, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8200b4f-bb58-4cd2-b209-fa20d2a6fc20", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5295c8ca-2d03-4d55-a818-16fcf7d728ab", "record_id": "flaws_cloudtrail:0000340:5295c8ca-2d03-4d55-a818-16fcf7d728ab", "row_index": 340, "timestamp": "2018-10-10T20:37:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5295c8ca-2d03-4d55-a818-16fcf7d728ab", "eventTime": "2018-10-10T20:37:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84cd0aae-f04e-40cb-983b-b0ebbf018946", "record_id": "flaws_cloudtrail:0000341:84cd0aae-f04e-40cb-983b-b0ebbf018946", "row_index": 341, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84cd0aae-f04e-40cb-983b-b0ebbf018946", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ca83229-07a8-4c76-ba8a-4f367e09d71d", "record_id": "flaws_cloudtrail:0000342:9ca83229-07a8-4c76-ba8a-4f367e09d71d", "row_index": 342, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ca83229-07a8-4c76-ba8a-4f367e09d71d", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c1c7ea-c635-475f-a725-8b744b51a869", "record_id": "flaws_cloudtrail:0000343:63c1c7ea-c635-475f-a725-8b744b51a869", "row_index": 343, "timestamp": "2018-10-10T20:37:51Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c1c7ea-c635-475f-a725-8b744b51a869", "eventTime": "2018-10-10T20:37:51Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0449b2-97a4-4728-ae6e-d99279f34942", "record_id": "flaws_cloudtrail:0000344:3d0449b2-97a4-4728-ae6e-d99279f34942", "row_index": 344, "timestamp": "2018-10-10T20:37:52Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0449b2-97a4-4728-ae6e-d99279f34942", "eventTime": "2018-10-10T20:37:52Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "068ca08a-3e08-4cce-aff3-ac8de9a68d5f", "record_id": "flaws_cloudtrail:0000345:068ca08a-3e08-4cce-aff3-ac8de9a68d5f", "row_index": 345, "timestamp": "2018-10-10T20:37:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "068ca08a-3e08-4cce-aff3-ac8de9a68d5f", "eventTime": "2018-10-10T20:37:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d29f231-2237-4be7-bf66-248987f5723a1", "record_id": "flaws_cloudtrail:0000346:4d29f231-2237-4be7-bf66-248987f5723a1", "row_index": 346, "timestamp": "2018-10-10T20:37:52Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d29f231-2237-4be7-bf66-248987f5723a1", "eventTime": "2018-10-10T20:37:52Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838e08b9-a410-43e0-b42a-f729eaa0b230", "record_id": "flaws_cloudtrail:0000347:838e08b9-a410-43e0-b42a-f729eaa0b230", "row_index": 347, "timestamp": "2018-10-10T20:37:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838e08b9-a410-43e0-b42a-f729eaa0b230", "eventTime": "2018-10-10T20:37:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4213c3c7-924e-4b54-99ae-9f5e760c25a4", "record_id": "flaws_cloudtrail:0000348:4213c3c7-924e-4b54-99ae-9f5e760c25a4", "row_index": 348, "timestamp": "2018-10-10T20:37:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4213c3c7-924e-4b54-99ae-9f5e760c25a4", "eventTime": "2018-10-10T20:37:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a863d588-5ef8-4aa5-b5c5-1cff1faf0e49", "record_id": "flaws_cloudtrail:0000349:a863d588-5ef8-4aa5-b5c5-1cff1faf0e49", "row_index": 349, "timestamp": "2018-10-10T20:37:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a863d588-5ef8-4aa5-b5c5-1cff1faf0e49", "eventTime": "2018-10-10T20:37:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bc65c57-f2a8-40ba-83c4-f811fd076565a", "record_id": "flaws_cloudtrail:0000350:1bc65c57-f2a8-40ba-83c4-f811fd076565a", "row_index": 350, "timestamp": "2018-10-10T20:37:53Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bc65c57-f2a8-40ba-83c4-f811fd076565a", "eventTime": "2018-10-10T20:37:53Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb82acf5-dbac-4885-861c-d94ba522c403", "record_id": "flaws_cloudtrail:0000351:eb82acf5-dbac-4885-861c-d94ba522c403", "row_index": 351, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb82acf5-dbac-4885-861c-d94ba522c403", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0af674e-0b2d-4204-a63b-e23daf141747", "record_id": "flaws_cloudtrail:0000352:b0af674e-0b2d-4204-a63b-e23daf141747", "row_index": 352, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0af674e-0b2d-4204-a63b-e23daf141747", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43ddd6d-510b-409a-862d-3de164d76343", "record_id": "flaws_cloudtrail:0000353:c43ddd6d-510b-409a-862d-3de164d76343", "row_index": 353, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43ddd6d-510b-409a-862d-3de164d76343", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bfc78b6-c8c0-4849-8ea6-5da118abcc6c", "record_id": "flaws_cloudtrail:0000354:8bfc78b6-c8c0-4849-8ea6-5da118abcc6c", "row_index": 354, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bfc78b6-c8c0-4849-8ea6-5da118abcc6c", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eea5996a-4723-4b75-9e37-65007c655", "record_id": "flaws_cloudtrail:0000355:eea5996a-4723-4b75-9e37-65007c655", "row_index": 355, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eea5996a-4723-4b75-9e37-65007c655", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0423d9bc-8ca9-4fc8-b023-08f23022b1c", "record_id": "flaws_cloudtrail:0000356:0423d9bc-8ca9-4fc8-b023-08f23022b1c", "row_index": 356, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0423d9bc-8ca9-4fc8-b023-08f23022b1c", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4abca904-5fba-497e-bdd4-0e1d4fa6ec0f", "record_id": "flaws_cloudtrail:0000357:4abca904-5fba-497e-bdd4-0e1d4fa6ec0f", "row_index": 357, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4abca904-5fba-497e-bdd4-0e1d4fa6ec0f", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "503dc45a-47e0-48a6-ba26-10be3975fca2", "record_id": "flaws_cloudtrail:0000358:503dc45a-47e0-48a6-ba26-10be3975fca2", "row_index": 358, "timestamp": "2018-10-10T20:37:53Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "503dc45a-47e0-48a6-ba26-10be3975fca2", "eventTime": "2018-10-10T20:37:53Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcea7fb-5bb0-4971-8f06-c86fae82ff6d", "record_id": "flaws_cloudtrail:0000359:efcea7fb-5bb0-4971-8f06-c86fae82ff6d", "row_index": 359, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcea7fb-5bb0-4971-8f06-c86fae82ff6d", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96700d9-c4ed-4698-b934-f561d20f5cbd", "record_id": "flaws_cloudtrail:0000360:96700d9-c4ed-4698-b934-f561d20f5cbd", "row_index": 360, "timestamp": "2018-10-10T20:37:53Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1YY77G2EE4MZYH0I", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96700d9-c4ed-4698-b934-f561d20f5cbd", "eventTime": "2018-10-10T20:37:53Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1YY77G2EE4MZYH0I", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-10T20:37:53Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59884c-a732-4ffb-85fc-aad7e055b8c5", "record_id": "flaws_cloudtrail:0000361:59884c-a732-4ffb-85fc-aad7e055b8c5", "row_index": 361, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59884c-a732-4ffb-85fc-aad7e055b8c5", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fffcbe6-ae28-41d4-b914-2deedb7bc3a2", "record_id": "flaws_cloudtrail:0000362:5fffcbe6-ae28-41d4-b914-2deedb7bc3a2", "row_index": 362, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fffcbe6-ae28-41d4-b914-2deedb7bc3a2", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db77d483-a508-4488-b061-ef758d43515", "record_id": "flaws_cloudtrail:0000363:db77d483-a508-4488-b061-ef758d43515", "row_index": 363, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db77d483-a508-4488-b061-ef758d43515", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c6dda6-4d7e-466b-a047-59ed3d8366c4", "record_id": "flaws_cloudtrail:0000364:13c6dda6-4d7e-466b-a047-59ed3d8366c4", "row_index": 364, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c6dda6-4d7e-466b-a047-59ed3d8366c4", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a81112f-75c0-4204-85af-93ff178564ec", "record_id": "flaws_cloudtrail:0000365:3a81112f-75c0-4204-85af-93ff178564ec", "row_index": 365, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a81112f-75c0-4204-85af-93ff178564ec", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "596d2fde-374c-47ce-8a40-5ba1d88993e", "record_id": "flaws_cloudtrail:0000366:596d2fde-374c-47ce-8a40-5ba1d88993e", "row_index": 366, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "596d2fde-374c-47ce-8a40-5ba1d88993e", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc5c37f-265d-48e9-be93-a480a9be4976", "record_id": "flaws_cloudtrail:0000367:4cc5c37f-265d-48e9-be93-a480a9be4976", "row_index": 367, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc5c37f-265d-48e9-be93-a480a9be4976", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a498d2a6-2121-4c74-8586-c976f420621", "record_id": "flaws_cloudtrail:0000368:a498d2a6-2121-4c74-8586-c976f420621", "row_index": 368, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a498d2a6-2121-4c74-8586-c976f420621", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "583bd7a5-0966-4831-99b5-31b13ed42cbd", "record_id": "flaws_cloudtrail:0000369:583bd7a5-0966-4831-99b5-31b13ed42cbd", "row_index": 369, "timestamp": "2018-10-10T20:37:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "583bd7a5-0966-4831-99b5-31b13ed42cbd", "eventTime": "2018-10-10T20:37:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8823af4c-473e-4abb-84c5-a489461e6", "record_id": "flaws_cloudtrail:0000370:8823af4c-473e-4abb-84c5-a489461e6", "row_index": 370, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8823af4c-473e-4abb-84c5-a489461e6", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c30be35f-f331-4330-9524-202e9b7fe9d0", "record_id": "flaws_cloudtrail:0000371:c30be35f-f331-4330-9524-202e9b7fe9d0", "row_index": 371, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c30be35f-f331-4330-9524-202e9b7fe9d0", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beda9e23-cc3f-4283-944f-404b9a85a1f2", "record_id": "flaws_cloudtrail:0000372:beda9e23-cc3f-4283-944f-404b9a85a1f2", "row_index": 372, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beda9e23-cc3f-4283-944f-404b9a85a1f2", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5bc6ed0-a853-46e6-b85f-9be0a633b178", "record_id": "flaws_cloudtrail:0000373:e5bc6ed0-a853-46e6-b85f-9be0a633b178", "row_index": 373, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5bc6ed0-a853-46e6-b85f-9be0a633b178", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e6b4c12-ed03-4081-9170-0d04ee5e1942", "record_id": "flaws_cloudtrail:0000374:9e6b4c12-ed03-4081-9170-0d04ee5e1942", "row_index": 374, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e6b4c12-ed03-4081-9170-0d04ee5e1942", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f9a4fec-b6f9-4e60-9c12-462dcc7872cc", "record_id": "flaws_cloudtrail:0000375:2f9a4fec-b6f9-4e60-9c12-462dcc7872cc", "row_index": 375, "timestamp": "2018-10-10T20:37:54Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f9a4fec-b6f9-4e60-9c12-462dcc7872cc", "eventTime": "2018-10-10T20:37:54Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6427f7a-157e-452a-8831-baee39a0d254", "record_id": "flaws_cloudtrail:0000376:c6427f7a-157e-452a-8831-baee39a0d254", "row_index": 376, "timestamp": "2018-10-10T20:37:54Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6427f7a-157e-452a-8831-baee39a0d254", "eventTime": "2018-10-10T20:37:54Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab716248-7395-4948-b4a7-43b0a076654b", "record_id": "flaws_cloudtrail:0000377:aab716248-7395-4948-b4a7-43b0a076654b", "row_index": 377, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab716248-7395-4948-b4a7-43b0a076654b", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50834b4-98e4-4202-b2af-758ddf21ef5e", "record_id": "flaws_cloudtrail:0000378:b50834b4-98e4-4202-b2af-758ddf21ef5e", "row_index": 378, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50834b4-98e4-4202-b2af-758ddf21ef5e", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305049f2-3f60-4d68-ad8c-df47613475c8", "record_id": "flaws_cloudtrail:0000379:305049f2-3f60-4d68-ad8c-df47613475c8", "row_index": 379, "timestamp": "2018-10-10T20:37:54Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305049f2-3f60-4d68-ad8c-df47613475c8", "eventTime": "2018-10-10T20:37:54Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd2c076-d482-432e-bbd8-525473bb2d92e", "record_id": "flaws_cloudtrail:0000380:4fd2c076-d482-432e-bbd8-525473bb2d92e", "row_index": 380, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd2c076-d482-432e-bbd8-525473bb2d92e", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72713-06e9-4a35-b00a-838043d780c6", "record_id": "flaws_cloudtrail:0000381:72713-06e9-4a35-b00a-838043d780c6", "row_index": 381, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72713-06e9-4a35-b00a-838043d780c6", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87b25b97-b999-482b-835e-923c2ea754a1", "record_id": "flaws_cloudtrail:0000382:87b25b97-b999-482b-835e-923c2ea754a1", "row_index": 382, "timestamp": "2018-10-10T20:37:54Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87b25b97-b999-482b-835e-923c2ea754a1", "eventTime": "2018-10-10T20:37:54Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeb708d6-fb28-4ade-8302-1b19d120d497", "record_id": "flaws_cloudtrail:0000383:aeb708d6-fb28-4ade-8302-1b19d120d497", "row_index": 383, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeb708d6-fb28-4ade-8302-1b19d120d497", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e931050c-3acf-43eb-b1af-d4e2c758c257", "record_id": "flaws_cloudtrail:0000384:e931050c-3acf-43eb-b1af-d4e2c758c257", "row_index": 384, "timestamp": "2018-10-10T20:37:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 627, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e931050c-3acf-43eb-b1af-d4e2c758c257", "eventTime": "2018-10-10T20:37:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ed57fa-e9f8-43f2-bf7b-881d82ed7799", "record_id": "flaws_cloudtrail:0000385:60ed57fa-e9f8-43f2-bf7b-881d82ed7799", "row_index": 385, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ed57fa-e9f8-43f2-bf7b-881d82ed7799", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7741a174-b666-43e4-83a1-63ed34c003696", "record_id": "flaws_cloudtrail:0000386:7741a174-b666-43e4-83a1-63ed34c003696", "row_index": 386, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7741a174-b666-43e4-83a1-63ed34c003696", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6da697b-5d66-4acc-a0d4-a38481c6", "record_id": "flaws_cloudtrail:0000387:b6da697b-5d66-4acc-a0d4-a38481c6", "row_index": 387, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6da697b-5d66-4acc-a0d4-a38481c6", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e35302-db74-42c4-a577-2ad3e25a98f5", "record_id": "flaws_cloudtrail:0000388:1e35302-db74-42c4-a577-2ad3e25a98f5", "row_index": 388, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e35302-db74-42c4-a577-2ad3e25a98f5", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b496cd-1d06-49f7-a90b-ff8661558567", "record_id": "flaws_cloudtrail:0000389:06b496cd-1d06-49f7-a90b-ff8661558567", "row_index": 389, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b496cd-1d06-49f7-a90b-ff8661558567", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a43fece-aa78-49a7-8135-3de67dda6533", "record_id": "flaws_cloudtrail:0000390:4a43fece-aa78-49a7-8135-3de67dda6533", "row_index": 390, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a43fece-aa78-49a7-8135-3de67dda6533", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c3345e3-5e41-4b7c-8486-f4ebebc6f5f0", "record_id": "flaws_cloudtrail:0000391:6c3345e3-5e41-4b7c-8486-f4ebebc6f5f0", "row_index": 391, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c3345e3-5e41-4b7c-8486-f4ebebc6f5f0", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96173a70-a825-4a92-b5a4-362be879d107", "record_id": "flaws_cloudtrail:0000392:96173a70-a825-4a92-b5a4-362be879d107", "row_index": 392, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96173a70-a825-4a92-b5a4-362be879d107", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "648bd07a-acd1-47c3-9b1e-3c7adf4fa5c4", "record_id": "flaws_cloudtrail:0000393:648bd07a-acd1-47c3-9b1e-3c7adf4fa5c4", "row_index": 393, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "648bd07a-acd1-47c3-9b1e-3c7adf4fa5c4", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8ac420-c144-48a6-8549-53e165980a4fc", "record_id": "flaws_cloudtrail:0000394:dc8ac420-c144-48a6-8549-53e165980a4fc", "row_index": 394, "timestamp": "2018-10-10T20:37:54Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8ac420-c144-48a6-8549-53e165980a4fc", "eventTime": "2018-10-10T20:37:54Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfab0ab6-9b7f-4c1d-ba19-a8efa432d5dd", "record_id": "flaws_cloudtrail:0000395:dfab0ab6-9b7f-4c1d-ba19-a8efa432d5dd", "row_index": 395, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfab0ab6-9b7f-4c1d-ba19-a8efa432d5dd", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41713d9-f8da-44fe-80af-b7fe77d85429", "record_id": "flaws_cloudtrail:0000396:41713d9-f8da-44fe-80af-b7fe77d85429", "row_index": 396, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41713d9-f8da-44fe-80af-b7fe77d85429", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec4e466b-586a-48e8-9ab5-ee0068a822b0", "record_id": "flaws_cloudtrail:0000397:ec4e466b-586a-48e8-9ab5-ee0068a822b0", "row_index": 397, "timestamp": "2018-10-10T20:37:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec4e466b-586a-48e8-9ab5-ee0068a822b0", "eventTime": "2018-10-10T20:37:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d770cedf-6ee1-4017-aad4-4b06c11a65ef", "record_id": "flaws_cloudtrail:0000398:d770cedf-6ee1-4017-aad4-4b06c11a65ef", "row_index": 398, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d770cedf-6ee1-4017-aad4-4b06c11a65ef", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce6698c-842f-4aa9-9e52-a37150b166a7", "record_id": "flaws_cloudtrail:0000399:7ce6698c-842f-4aa9-9e52-a37150b166a7", "row_index": 399, "timestamp": "2018-10-10T20:37:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce6698c-842f-4aa9-9e52-a37150b166a7", "eventTime": "2018-10-10T20:37:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e9e0c9c-ead9-46fc-9611-fc75fb9207fa", "record_id": "flaws_cloudtrail:0000400:2e9e0c9c-ead9-46fc-9611-fc75fb9207fa", "row_index": 400, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e9e0c9c-ead9-46fc-9611-fc75fb9207fa", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6527c9f9-050c-46c3-8ab3-60b6c7952cd7", "record_id": "flaws_cloudtrail:0000401:6527c9f9-050c-46c3-8ab3-60b6c7952cd7", "row_index": 401, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6527c9f9-050c-46c3-8ab3-60b6c7952cd7", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fbcb28a-894a-41df-bbf0-7b058800c7346", "record_id": "flaws_cloudtrail:0000402:0fbcb28a-894a-41df-bbf0-7b058800c7346", "row_index": 402, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fbcb28a-894a-41df-bbf0-7b058800c7346", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "797dc836-eb37-4100-a9ca-44941260489f", "record_id": "flaws_cloudtrail:0000403:797dc836-eb37-4100-a9ca-44941260489f", "row_index": 403, "timestamp": "2018-10-10T20:37:55Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "797dc836-eb37-4100-a9ca-44941260489f", "eventTime": "2018-10-10T20:37:55Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a000671c5-7291-4b79-aeda-98698326fb39", "record_id": "flaws_cloudtrail:0000404:a000671c5-7291-4b79-aeda-98698326fb39", "row_index": 404, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a000671c5-7291-4b79-aeda-98698326fb39", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ba6be70-d7c6-48f6-b793-811aa4ce9892", "record_id": "flaws_cloudtrail:0000405:5ba6be70-d7c6-48f6-b793-811aa4ce9892", "row_index": 405, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ba6be70-d7c6-48f6-b793-811aa4ce9892", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "355762a87-422e-4de6-8a2f-e5f14cc64ba0", "record_id": "flaws_cloudtrail:0000406:355762a87-422e-4de6-8a2f-e5f14cc64ba0", "row_index": 406, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "355762a87-422e-4de6-8a2f-e5f14cc64ba0", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dbc146c-477a-4525-9452-fcd98d67180", "record_id": "flaws_cloudtrail:0000407:5dbc146c-477a-4525-9452-fcd98d67180", "row_index": 407, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dbc146c-477a-4525-9452-fcd98d67180", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052e33da-4ce6-4110-8b51-c54665a7cc1", "record_id": "flaws_cloudtrail:0000408:052e33da-4ce6-4110-8b51-c54665a7cc1", "row_index": 408, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052e33da-4ce6-4110-8b51-c54665a7cc1", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8647ae80-6219-4d93-b2ea-e7d58d87a3ac", "record_id": "flaws_cloudtrail:0000409:8647ae80-6219-4d93-b2ea-e7d58d87a3ac", "row_index": 409, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeActiveReceiptRuleSet", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8647ae80-6219-4d93-b2ea-e7d58d87a3ac", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeActiveReceiptRuleSet", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: ses:DescribeActiveReceiptRuleSet", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651bc7e9-316b-480c-8b85-6b9a3d0d04d7", "record_id": "flaws_cloudtrail:0000410:651bc7e9-316b-480c-8b85-6b9a3d0d04d7", "row_index": 410, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651bc7e9-316b-480c-8b85-6b9a3d0d04d7", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "477726-2c6d-4559-b2c5-fe4b722027f3", "record_id": "flaws_cloudtrail:0000411:477726-2c6d-4559-b2c5-fe4b722027f3", "row_index": 411, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "477726-2c6d-4559-b2c5-fe4b722027f3", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d97ad1-2be1-478d-a0b0-58756ffaa1c", "record_id": "flaws_cloudtrail:0000412:e3d97ad1-2be1-478d-a0b0-58756ffaa1c", "row_index": 412, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d97ad1-2be1-478d-a0b0-58756ffaa1c", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7320c55f-b97f-4f45-b15c-3dfa67a0bec5", "record_id": "flaws_cloudtrail:0000413:7320c55f-b97f-4f45-b15c-3dfa67a0bec5", "row_index": 413, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7320c55f-b97f-4f45-b15c-3dfa67a0bec5", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec52af7-58a9-43f4-94c2-e4e6c7480cc4", "record_id": "flaws_cloudtrail:0000414:8ec52af7-58a9-43f4-94c2-e4e6c7480cc4", "row_index": 414, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec52af7-58a9-43f4-94c2-e4e6c7480cc4", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e769e5-4564-4c40-92af-cc323f2428db", "record_id": "flaws_cloudtrail:0000415:67e769e5-4564-4c40-92af-cc323f2428db", "row_index": 415, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e769e5-4564-4c40-92af-cc323f2428db", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b89f642-2045-4ce9-b037-60e649cd3805", "record_id": "flaws_cloudtrail:0000416:5b89f642-2045-4ce9-b037-60e649cd3805", "row_index": 416, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b89f642-2045-4ce9-b037-60e649cd3805", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a807173-8b24-4837-ab3d-904cf9be7cc3", "record_id": "flaws_cloudtrail:0000417:0a807173-8b24-4837-ab3d-904cf9be7cc3", "row_index": 417, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeActiveReceiptRuleSet", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a807173-8b24-4837-ab3d-904cf9be7cc3", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeActiveReceiptRuleSet", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: ses:DescribeActiveReceiptRuleSet", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "109b6b78-690d-4394-ae68-10c91c120100a", "record_id": "flaws_cloudtrail:0000418:109b6b78-690d-4394-ae68-10c91c120100a", "row_index": 418, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "109b6b78-690d-4394-ae68-10c91c120100a", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "385c95c0-c1cc-4b6e-8b93-d048a497ec6c", "record_id": "flaws_cloudtrail:0000419:385c95c0-c1cc-4b6e-8b93-d048a497ec6c", "row_index": 419, "timestamp": "2018-10-10T20:37:56Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "385c95c0-c1cc-4b6e-8b93-d048a497ec6c", "eventTime": "2018-10-10T20:37:56Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446704be9-1283-4ce6-88a7-c0249b30e4e9", "record_id": "flaws_cloudtrail:0000420:446704be9-1283-4ce6-88a7-c0249b30e4e9", "row_index": 420, "timestamp": "2018-10-10T20:37:56Z", "event_type": "DescribeActiveReceiptRuleSet", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446704be9-1283-4ce6-88a7-c0249b30e4e9", "eventTime": "2018-10-10T20:37:56Z", "eventName": "DescribeActiveReceiptRuleSet", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: ses:DescribeActiveReceiptRuleSet", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "598f85d8-0651-42c4-b2cb-ed1353c6ec0f", "record_id": "flaws_cloudtrail:0000421:598f85d8-0651-42c4-b2cb-ed1353c6ec0f", "row_index": 421, "timestamp": "2018-10-10T20:37:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "598f85d8-0651-42c4-b2cb-ed1353c6ec0f", "eventTime": "2018-10-10T20:37:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c715266d9-8dfa-45e9-a129-9f34693c2905", "record_id": "flaws_cloudtrail:0000422:c715266d9-8dfa-45e9-a129-9f34693c2905", "row_index": 422, "timestamp": "2018-10-10T20:37:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c715266d9-8dfa-45e9-a129-9f34693c2905", "eventTime": "2018-10-10T20:37:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cb6567a-8457-4aad-8a82-62244c917a7", "record_id": "flaws_cloudtrail:0000423:5cb6567a-8457-4aad-8a82-62244c917a7", "row_index": 423, "timestamp": "2018-10-10T20:37:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cb6567a-8457-4aad-8a82-62244c917a7", "eventTime": "2018-10-10T20:37:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e774e451-107a-4c1a-9366-7fec0e58a5a5", "record_id": "flaws_cloudtrail:0000424:e774e451-107a-4c1a-9366-7fec0e58a5a5", "row_index": 424, "timestamp": "2018-10-10T20:37:57Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e774e451-107a-4c1a-9366-7fec0e58a5a5", "eventTime": "2018-10-10T20:37:57Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e548bc1-c52b-47f2-8b0e-a146e491b938", "record_id": "flaws_cloudtrail:0000425:3e548bc1-c52b-47f2-8b0e-a146e491b938", "row_index": 425, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e548bc1-c52b-47f2-8b0e-a146e491b938", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4164e0a-6579-4d2a-83f7-47625b6ab", "record_id": "flaws_cloudtrail:0000426:c4164e0a-6579-4d2a-83f7-47625b6ab", "row_index": 426, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4164e0a-6579-4d2a-83f7-47625b6ab", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c944fc52-f1f3-485c-9688-79f088d0df76", "record_id": "flaws_cloudtrail:0000427:c944fc52-f1f3-485c-9688-79f088d0df76", "row_index": 427, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c944fc52-f1f3-485c-9688-79f088d0df76", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad2adc2b-48ca-4b03-afa9-2cc4f879d9af", "record_id": "flaws_cloudtrail:0000428:ad2adc2b-48ca-4b03-afa9-2cc4f879d9af", "row_index": 428, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad2adc2b-48ca-4b03-afa9-2cc4f879d9af", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33805fa-78d8-4498-be96-5d372170e668b", "record_id": "flaws_cloudtrail:0000429:33805fa-78d8-4498-be96-5d372170e668b", "row_index": 429, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 649, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33805fa-78d8-4498-be96-5d372170e668b", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dafb4a5f-019b-467d-a5c0-d7449d97f08e", "record_id": "flaws_cloudtrail:0000430:dafb4a5f-019b-467d-a5c0-d7449d97f08e", "row_index": 430, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 649, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dafb4a5f-019b-467d-a5c0-d7449d97f08e", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14636fe6-c0a3-4547-8b2e-31da7a1ec84e", "record_id": "flaws_cloudtrail:0000431:14636fe6-c0a3-4547-8b2e-31da7a1ec84e", "row_index": 431, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14636fe6-c0a3-4547-8b2e-31da7a1ec84e", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ff0136-eff6-4e63-8f2c-6e5aec3ab968", "record_id": "flaws_cloudtrail:0000432:09ff0136-eff6-4e63-8f2c-6e5aec3ab968", "row_index": 432, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ff0136-eff6-4e63-8f2c-6e5aec3ab968", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b7a33d4-b2ba-4c4d-8930-3dfb906b5fd4", "record_id": "flaws_cloudtrail:0000433:8b7a33d4-b2ba-4c4d-8930-3dfb906b5fd4", "row_index": 433, "timestamp": "2018-10-10T20:37:58Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b7a33d4-b2ba-4c4d-8930-3dfb906b5fd4", "eventTime": "2018-10-10T20:37:58Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1611d4f-e22a-475a-aac5-441c848d204c", "record_id": "flaws_cloudtrail:0000434:d1611d4f-e22a-475a-aac5-441c848d204c", "row_index": 434, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1611d4f-e22a-475a-aac5-441c848d204c", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b45ee81-7922-43af-a80e-656768e0c2d9", "record_id": "flaws_cloudtrail:0000435:1b45ee81-7922-43af-a80e-656768e0c2d9", "row_index": 435, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b45ee81-7922-43af-a80e-656768e0c2d9", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640e3397-3f8a-4fbd-a6da-4ea731a82acd", "record_id": "flaws_cloudtrail:0000436:640e3397-3f8a-4fbd-a6da-4ea731a82acd", "row_index": 436, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640e3397-3f8a-4fbd-a6da-4ea731a82acd", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5538e08-bc2d-4f8e-8b08-164904fdff", "record_id": "flaws_cloudtrail:0000437:e5538e08-bc2d-4f8e-8b08-164904fdff", "row_index": 437, "timestamp": "2018-10-10T20:37:58Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 644, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5538e08-bc2d-4f8e-8b08-164904fdff", "eventTime": "2018-10-10T20:37:58Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57002-ee15-4f98-ab65-8fef0a841767", "record_id": "flaws_cloudtrail:0000438:57002-ee15-4f98-ab65-8fef0a841767", "row_index": 438, "timestamp": "2018-10-10T20:37:59Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57002-ee15-4f98-ab65-8fef0a841767", "eventTime": "2018-10-10T20:37:59Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042d5651-1024-4d28-9757-3ba9b1ebc986", "record_id": "flaws_cloudtrail:0000439:042d5651-1024-4d28-9757-3ba9b1ebc986", "row_index": 439, "timestamp": "2018-10-10T20:37:59Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042d5651-1024-4d28-9757-3ba9b1ebc986", "eventTime": "2018-10-10T20:37:59Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "105465ec9-2f14-4e62-94f1-559316e02d6a", "record_id": "flaws_cloudtrail:0000440:105465ec9-2f14-4e62-94f1-559316e02d6a", "row_index": 440, "timestamp": "2018-10-10T20:37:59Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "105465ec9-2f14-4e62-94f1-559316e02d6a", "eventTime": "2018-10-10T20:37:59Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a34b6af-f103-40ba-9527-bfb2d23c0ed1", "record_id": "flaws_cloudtrail:0000441:8a34b6af-f103-40ba-9527-bfb2d23c0ed1", "row_index": 441, "timestamp": "2018-10-10T20:37:59Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a34b6af-f103-40ba-9527-bfb2d23c0ed1", "eventTime": "2018-10-10T20:37:59Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b98ea1c0-b3dc-4123-9fb9-dc5222dfd1cf", "record_id": "flaws_cloudtrail:0000442:b98ea1c0-b3dc-4123-9fb9-dc5222dfd1cf", "row_index": 442, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b98ea1c0-b3dc-4123-9fb9-dc5222dfd1cf", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6072a9a7-3a76-4f37-a566-72a1cc62def7", "record_id": "flaws_cloudtrail:0000443:6072a9a7-3a76-4f37-a566-72a1cc62def7", "row_index": 443, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6072a9a7-3a76-4f37-a566-72a1cc62def7", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48afe9ad-6574-4498-979e-4901abc5ffe7", "record_id": "flaws_cloudtrail:0000444:48afe9ad-6574-4498-979e-4901abc5ffe7", "row_index": 444, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48afe9ad-6574-4498-979e-4901abc5ffe7", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6a34b4-fc80-443f-8370-19ee1474cd2c", "record_id": "flaws_cloudtrail:0000445:de6a34b4-fc80-443f-8370-19ee1474cd2c", "row_index": 445, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6a34b4-fc80-443f-8370-19ee1474cd2c", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebba5c2-1a71-49e0-a0cb-a62447ac03af", "record_id": "flaws_cloudtrail:0000446:9ebba5c2-1a71-49e0-a0cb-a62447ac03af", "row_index": 446, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebba5c2-1a71-49e0-a0cb-a62447ac03af", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35759-7d3f-4ecc-b34b-1ca5418f3dcd", "record_id": "flaws_cloudtrail:0000447:f35759-7d3f-4ecc-b34b-1ca5418f3dcd", "row_index": 447, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35759-7d3f-4ecc-b34b-1ca5418f3dcd", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec8288a1-d22f-49f6-b071-fb80b0eb397b", "record_id": "flaws_cloudtrail:0000448:ec8288a1-d22f-49f6-b071-fb80b0eb397b", "row_index": 448, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec8288a1-d22f-49f6-b071-fb80b0eb397b", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a3cd9ae-9834-465a-9a92-cc0da2640f48", "record_id": "flaws_cloudtrail:0000449:3a3cd9ae-9834-465a-9a92-cc0da2640f48", "row_index": 449, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a3cd9ae-9834-465a-9a92-cc0da2640f48", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdf6c5c4-96d9-4b70-a599-4cc0cb11e5a6", "record_id": "flaws_cloudtrail:0000450:bdf6c5c4-96d9-4b70-a599-4cc0cb11e5a6", "row_index": 450, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdf6c5c4-96d9-4b70-a599-4cc0cb11e5a6", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97b538b-871e-4a4e-8d4d-0c8ce359e452", "record_id": "flaws_cloudtrail:0000451:b97b538b-871e-4a4e-8d4d-0c8ce359e452", "row_index": 451, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97b538b-871e-4a4e-8d4d-0c8ce359e452", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f18b0fc-de23-4be4-b82f-05ee3e3221a3", "record_id": "flaws_cloudtrail:0000452:3f18b0fc-de23-4be4-b82f-05ee3e3221a3", "row_index": 452, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f18b0fc-de23-4be4-b82f-05ee3e3221a3", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "388ad528-74b6-42bb-9ac8-f4ae721e1f43", "record_id": "flaws_cloudtrail:0000453:388ad528-74b6-42bb-9ac8-f4ae721e1f43", "row_index": 453, "timestamp": "2018-10-10T20:38:00Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "388ad528-74b6-42bb-9ac8-f4ae721e1f43", "eventTime": "2018-10-10T20:38:00Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219b22da-c8f7-4320-bccc-8fc527d5f4e4", "record_id": "flaws_cloudtrail:0000454:219b22da-c8f7-4320-bccc-8fc527d5f4e4", "row_index": 454, "timestamp": "2018-10-10T20:38:00Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219b22da-c8f7-4320-bccc-8fc527d5f4e4", "eventTime": "2018-10-10T20:38:00Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e3fa98d-ce8a-46d9-b515-e68c71ae0b37", "record_id": "flaws_cloudtrail:0000455:6e3fa98d-ce8a-46d9-b515-e68c71ae0b37", "row_index": 455, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e3fa98d-ce8a-46d9-b515-e68c71ae0b37", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beddbb54-cb6f-4c9d-bff3-9e561ee97f6e", "record_id": "flaws_cloudtrail:0000456:beddbb54-cb6f-4c9d-bff3-9e561ee97f6e", "row_index": 456, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beddbb54-cb6f-4c9d-bff3-9e561ee97f6e", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8408f812-22bb-4212-8487-ff01a6a755c5", "record_id": "flaws_cloudtrail:0000457:8408f812-22bb-4212-8487-ff01a6a755c5", "row_index": 457, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8408f812-22bb-4212-8487-ff01a6a755c5", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd2b7092-4bb0-4b83-b984-f288ee2dd02b", "record_id": "flaws_cloudtrail:0000458:fd2b7092-4bb0-4b83-b984-f288ee2dd02b", "row_index": 458, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd2b7092-4bb0-4b83-b984-f288ee2dd02b", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f5eb1a4-670c-44d6-996e-73252116216e", "record_id": "flaws_cloudtrail:0000459:4f5eb1a4-670c-44d6-996e-73252116216e", "row_index": 459, "timestamp": "2018-10-10T20:38:01Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f5eb1a4-670c-44d6-996e-73252116216e", "eventTime": "2018-10-10T20:38:01Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1051d413-84da-4deb-b7de-37587bbaf4d4", "record_id": "flaws_cloudtrail:0000460:1051d413-84da-4deb-b7de-37587bbaf4d4", "row_index": 460, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1051d413-84da-4deb-b7de-37587bbaf4d4", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38fdc112-b592-4e33-9298-b1a47649dd", "record_id": "flaws_cloudtrail:0000461:38fdc112-b592-4e33-9298-b1a47649dd", "row_index": 461, "timestamp": "2018-10-10T20:38:01Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38fdc112-b592-4e33-9298-b1a47649dd", "eventTime": "2018-10-10T20:38:01Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16db94ff-f9fc-40b5-8aed-627646ee9492", "record_id": "flaws_cloudtrail:0000462:16db94ff-f9fc-40b5-8aed-627646ee9492", "row_index": 462, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16db94ff-f9fc-40b5-8aed-627646ee9492", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc6c75a-a6dc-4752-9c0f-682645330bb3", "record_id": "flaws_cloudtrail:0000463:2bc6c75a-a6dc-4752-9c0f-682645330bb3", "row_index": 463, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc6c75a-a6dc-4752-9c0f-682645330bb3", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ddacbd5-6761-40de-a120-d31f4b78a811", "record_id": "flaws_cloudtrail:0000464:7ddacbd5-6761-40de-a120-d31f4b78a811", "row_index": 464, "timestamp": "2018-10-10T20:38:01Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ddacbd5-6761-40de-a120-d31f4b78a811", "eventTime": "2018-10-10T20:38:01Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "253e2810-3747-41dc-b0bd-7b0451518253", "record_id": "flaws_cloudtrail:0000465:253e2810-3747-41dc-b0bd-7b0451518253", "row_index": 465, "timestamp": "2018-10-10T20:38:01Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "253e2810-3747-41dc-b0bd-7b0451518253", "eventTime": "2018-10-10T20:38:01Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e2c3c0f-6783-48a4-b3f0-70491c86b9d", "record_id": "flaws_cloudtrail:0000466:0e2c3c0f-6783-48a4-b3f0-70491c86b9d", "row_index": 466, "timestamp": "2018-10-10T20:38:01Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e2c3c0f-6783-48a4-b3f0-70491c86b9d", "eventTime": "2018-10-10T20:38:01Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: sagemaker:ListNotebookInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ee89d13-72e4-468c-84dc-658fa6da4a0d", "record_id": "flaws_cloudtrail:0000467:6ee89d13-72e4-468c-84dc-658fa6da4a0d", "row_index": 467, "timestamp": "2018-10-10T20:38:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ee89d13-72e4-468c-84dc-658fa6da4a0d", "eventTime": "2018-10-10T20:38:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8af6e639-ae4c-427b-89d2-ddffa4823dff", "record_id": "flaws_cloudtrail:0000468:8af6e639-ae4c-427b-89d2-ddffa4823dff", "row_index": 468, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8af6e639-ae4c-427b-89d2-ddffa4823dff", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea966e16-b65a-45c6-8f9c-e2c2d5498119", "record_id": "flaws_cloudtrail:0000469:ea966e16-b65a-45c6-8f9c-e2c2d5498119", "row_index": 469, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea966e16-b65a-45c6-8f9c-e2c2d5498119", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266184-8bd6-4414-944e-d4d790054b32", "record_id": "flaws_cloudtrail:0000470:266184-8bd6-4414-944e-d4d790054b32", "row_index": 470, "timestamp": "2018-10-10T20:38:01Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266184-8bd6-4414-944e-d4d790054b32", "eventTime": "2018-10-10T20:38:01Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9dfc4d9-c0fc-42c1-a735-0529d4fa93dd", "record_id": "flaws_cloudtrail:0000471:f9dfc4d9-c0fc-42c1-a735-0529d4fa93dd", "row_index": 471, "timestamp": "2018-10-10T20:38:02Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9dfc4d9-c0fc-42c1-a735-0529d4fa93dd", "eventTime": "2018-10-10T20:38:02Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "addcbbf6-0ac8-4785-8cb1-2add2c10a559", "record_id": "flaws_cloudtrail:0000472:addcbbf6-0ac8-4785-8cb1-2add2c10a559", "row_index": 472, "timestamp": "2018-10-10T20:38:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "addcbbf6-0ac8-4785-8cb1-2add2c10a559", "eventTime": "2018-10-10T20:38:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aafe38e-a125-46d2-ac00-439c3270b0a1", "record_id": "flaws_cloudtrail:0000473:6aafe38e-a125-46d2-ac00-439c3270b0a1", "row_index": 473, "timestamp": "2018-10-10T20:38:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aafe38e-a125-46d2-ac00-439c3270b0a1", "eventTime": "2018-10-10T20:38:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ef75de6-158a-4114-871f-ae962cb5e30e", "record_id": "flaws_cloudtrail:0000474:4ef75de6-158a-4114-871f-ae962cb5e30e", "row_index": 474, "timestamp": "2018-10-10T20:38:02Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ef75de6-158a-4114-871f-ae962cb5e30e", "eventTime": "2018-10-10T20:38:02Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4572e941-8c69-4ae9-9bab-de0dee4db11b", "record_id": "flaws_cloudtrail:0000475:4572e941-8c69-4ae9-9bab-de0dee4db11b", "row_index": 475, "timestamp": "2018-10-10T20:38:02Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4572e941-8c69-4ae9-9bab-de0dee4db11b", "eventTime": "2018-10-10T20:38:02Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "983497b-c523-4f1b-9039-5f5856c5f8ed", "record_id": "flaws_cloudtrail:0000476:983497b-c523-4f1b-9039-5f5856c5f8ed", "row_index": 476, "timestamp": "2018-10-10T20:38:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "983497b-c523-4f1b-9039-5f5856c5f8ed", "eventTime": "2018-10-10T20:38:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bb334725-a6d7-4d92-a22a-730238ebbe82", "record_id": "flaws_cloudtrail:0000477:6bb334725-a6d7-4d92-a22a-730238ebbe82", "row_index": 477, "timestamp": "2018-10-10T20:38:03Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bb334725-a6d7-4d92-a22a-730238ebbe82", "eventTime": "2018-10-10T20:38:03Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cac9fead-c6ac-4412-9622-e705fbfdaba4", "record_id": "flaws_cloudtrail:0000478:cac9fead-c6ac-4412-9622-e705fbfdaba4", "row_index": 478, "timestamp": "2018-10-10T20:38:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cac9fead-c6ac-4412-9622-e705fbfdaba4", "eventTime": "2018-10-10T20:38:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a94c0440-213d-4ef1-ad4b-d36378fca93c", "record_id": "flaws_cloudtrail:0000479:a94c0440-213d-4ef1-ad4b-d36378fca93c", "row_index": 479, "timestamp": "2018-10-10T20:38:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a94c0440-213d-4ef1-ad4b-d36378fca93c", "eventTime": "2018-10-10T20:38:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c0aa654-2ec5-4df5-833e-0a58db90e63b", "record_id": "flaws_cloudtrail:0000480:3c0aa654-2ec5-4df5-833e-0a58db90e63b", "row_index": 480, "timestamp": "2018-10-10T20:38:03Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c0aa654-2ec5-4df5-833e-0a58db90e63b", "eventTime": "2018-10-10T20:38:03Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868cffcd-83f8-48f0-932d-82cddda897c8", "record_id": "flaws_cloudtrail:0000481:868cffcd-83f8-48f0-932d-82cddda897c8", "row_index": 481, "timestamp": "2018-10-10T20:38:03Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868cffcd-83f8-48f0-932d-82cddda897c8", "eventTime": "2018-10-10T20:38:03Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5b5688-09a9-4b2a-b6c8-cd0f1113c8fa", "record_id": "flaws_cloudtrail:0000482:2d5b5688-09a9-4b2a-b6c8-cd0f1113c8fa", "row_index": 482, "timestamp": "2018-10-10T20:38:03Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5b5688-09a9-4b2a-b6c8-cd0f1113c8fa", "eventTime": "2018-10-10T20:38:03Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5c9e13-0b62-4755-b436-895964b71e9ba", "record_id": "flaws_cloudtrail:0000483:7a5c9e13-0b62-4755-b436-895964b71e9ba", "row_index": 483, "timestamp": "2018-10-10T20:38:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5c9e13-0b62-4755-b436-895964b71e9ba", "eventTime": "2018-10-10T20:38:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5b05c6a-b855-4d39-8759-544dcbf72665", "record_id": "flaws_cloudtrail:0000484:d5b05c6a-b855-4d39-8759-544dcbf72665", "row_index": 484, "timestamp": "2018-10-10T20:38:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5b05c6a-b855-4d39-8759-544dcbf72665", "eventTime": "2018-10-10T20:38:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052b7e2c-d4f7-494d-8d98-cdb76fe895739", "record_id": "flaws_cloudtrail:0000485:052b7e2c-d4f7-494d-8d98-cdb76fe895739", "row_index": 485, "timestamp": "2018-10-10T20:38:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052b7e2c-d4f7-494d-8d98-cdb76fe895739", "eventTime": "2018-10-10T20:38:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8069ace5-1c35-4116-9468-8814a9a6e960", "record_id": "flaws_cloudtrail:0000486:8069ace5-1c35-4116-9468-8814a9a6e960", "row_index": 486, "timestamp": "2018-10-10T20:38:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8069ace5-1c35-4116-9468-8814a9a6e960", "eventTime": "2018-10-10T20:38:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45c1f040-fd9f-4303-96bd-62df96856325", "record_id": "flaws_cloudtrail:0000487:45c1f040-fd9f-4303-96bd-62df96856325", "row_index": 487, "timestamp": "2018-10-10T20:38:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45c1f040-fd9f-4303-96bd-62df96856325", "eventTime": "2018-10-10T20:38:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a657d59-eb97-4075-8d70-8cd465d02a75", "record_id": "flaws_cloudtrail:0000488:0a657d59-eb97-4075-8d70-8cd465d02a75", "row_index": 488, "timestamp": "2018-10-10T20:38:04Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a657d59-eb97-4075-8d70-8cd465d02a75", "eventTime": "2018-10-10T20:38:04Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c84ff315-21de-4f51-b949-c47683d5953", "record_id": "flaws_cloudtrail:0000489:c84ff315-21de-4f51-b949-c47683d5953", "row_index": 489, "timestamp": "2018-10-10T20:38:05Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c84ff315-21de-4f51-b949-c47683d5953", "eventTime": "2018-10-10T20:38:05Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a1d998f-2941-4e7b-ba4c-bf97fefe8fed", "record_id": "flaws_cloudtrail:0000490:6a1d998f-2941-4e7b-ba4c-bf97fefe8fed", "row_index": 490, "timestamp": "2018-10-10T20:38:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a1d998f-2941-4e7b-ba4c-bf97fefe8fed", "eventTime": "2018-10-10T20:38:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b4301a2-e5aa-4691-bfde-55cecfd67741", "record_id": "flaws_cloudtrail:0000491:3b4301a2-e5aa-4691-bfde-55cecfd67741", "row_index": 491, "timestamp": "2018-10-10T20:38:06Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 651, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b4301a2-e5aa-4691-bfde-55cecfd67741", "eventTime": "2018-10-10T20:38:06Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "583866df4-7e6d-4a43-9a8f-16b0968f7c51", "record_id": "flaws_cloudtrail:0000492:583866df4-7e6d-4a43-9a8f-16b0968f7c51", "row_index": 492, "timestamp": "2018-10-10T20:38:06Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "583866df4-7e6d-4a43-9a8f-16b0968f7c51", "eventTime": "2018-10-10T20:38:06Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82987e6c-4eb0-4b3c-a658-c5e615f818778", "record_id": "flaws_cloudtrail:0000493:82987e6c-4eb0-4b3c-a658-c5e615f818778", "row_index": 493, "timestamp": "2018-10-10T20:38:06Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82987e6c-4eb0-4b3c-a658-c5e615f818778", "eventTime": "2018-10-10T20:38:06Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d486dbe-212d-4f38-a08d-7e950d9e7edf", "record_id": "flaws_cloudtrail:0000494:9d486dbe-212d-4f38-a08d-7e950d9e7edf", "row_index": 494, "timestamp": "2018-10-10T20:38:07Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d486dbe-212d-4f38-a08d-7e950d9e7edf", "eventTime": "2018-10-10T20:38:07Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12148dcf-9748-4bc6-afb0-f9a2ba61c32f", "record_id": "flaws_cloudtrail:0000495:12148dcf-9748-4bc6-afb0-f9a2ba61c32f", "row_index": 495, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12148dcf-9748-4bc6-afb0-f9a2ba61c32f", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8aafba-9168-4942-b0ae-0d07aecee818", "record_id": "flaws_cloudtrail:0000496:5d8aafba-9168-4942-b0ae-0d07aecee818", "row_index": 496, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8aafba-9168-4942-b0ae-0d07aecee818", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f69e02-5575-485b-a150-972181ada", "record_id": "flaws_cloudtrail:0000497:96f69e02-5575-485b-a150-972181ada", "row_index": 497, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f69e02-5575-485b-a150-972181ada", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a566ffbf-a3ca-4e11-b7e0-d85ee1926fbf", "record_id": "flaws_cloudtrail:0000498:a566ffbf-a3ca-4e11-b7e0-d85ee1926fbf", "row_index": 498, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a566ffbf-a3ca-4e11-b7e0-d85ee1926fbf", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694b7155-73ec-401e-ba8d-5914a6963229", "record_id": "flaws_cloudtrail:0000499:694b7155-73ec-401e-ba8d-5914a6963229", "row_index": 499, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694b7155-73ec-401e-ba8d-5914a6963229", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c0d787-b5ec-4303-b47b-acf6c96fda3c", "record_id": "flaws_cloudtrail:0000500:21c0d787-b5ec-4303-b47b-acf6c96fda3c", "row_index": 500, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c0d787-b5ec-4303-b47b-acf6c96fda3c", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01f163118-1d30-42dd-b4bb-51b864e33aaa", "record_id": "flaws_cloudtrail:0000501:01f163118-1d30-42dd-b4bb-51b864e33aaa", "row_index": 501, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01f163118-1d30-42dd-b4bb-51b864e33aaa", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd302abf-499e-4348-9525-efc206b0a40e", "record_id": "flaws_cloudtrail:0000502:cd302abf-499e-4348-9525-efc206b0a40e", "row_index": 502, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd302abf-499e-4348-9525-efc206b0a40e", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "914128a80-1bcc-4ffe-a16b-d09cc43668f1", "record_id": "flaws_cloudtrail:0000503:914128a80-1bcc-4ffe-a16b-d09cc43668f1", "row_index": 503, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "914128a80-1bcc-4ffe-a16b-d09cc43668f1", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {"Filter": {"Value": {"tag": 1, "content": "available"}, "tag": 1, "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4866faf7-8fb6-4d94-b288-2b78b1959c6c", "record_id": "flaws_cloudtrail:0000504:4866faf7-8fb6-4d94-b288-2b78b1959c6c", "row_index": 504, "timestamp": "2018-10-10T20:38:08Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4866faf7-8fb6-4d94-b288-2b78b1959c6c", "eventTime": "2018-10-10T20:38:08Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {"items": [{"name": "status-code", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694b3ea4-2dbb-4c9f-b096-53ef64e2c1c9", "record_id": "flaws_cloudtrail:0000505:694b3ea4-2dbb-4c9f-b096-53ef64e2c1c9", "row_index": 505, "timestamp": "2018-10-10T20:38:09Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694b3ea4-2dbb-4c9f-b096-53ef64e2c1c9", "eventTime": "2018-10-10T20:38:09Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3649f72d-e0b3-4c30-97d2-a7ea339fe0f3", "record_id": "flaws_cloudtrail:0000506:3649f72d-e0b3-4c30-97d2-a7ea339fe0f3", "row_index": 506, "timestamp": "2018-10-10T20:38:10Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3649f72d-e0b3-4c30-97d2-a7ea339fe0f3", "eventTime": "2018-10-10T20:38:10Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4734a209-6c1d-481f-ba96-2f04a3100a58", "record_id": "flaws_cloudtrail:0000507:4734a209-6c1d-481f-ba96-2f04a3100a58", "row_index": 507, "timestamp": "2018-10-10T20:38:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4734a209-6c1d-481f-ba96-2f04a3100a58", "eventTime": "2018-10-10T20:38:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "785752f65-8986-4050-b826-434a51a60070", "record_id": "flaws_cloudtrail:0000508:785752f65-8986-4050-b826-434a51a60070", "row_index": 508, "timestamp": "2018-10-10T20:38:10Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "785752f65-8986-4050-b826-434a51a60070", "eventTime": "2018-10-10T20:38:10Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3673d711-2445-4eb3-ad71-b3d77ecb8fc9", "record_id": "flaws_cloudtrail:0000509:3673d711-2445-4eb3-ad71-b3d77ecb8fc9", "row_index": 509, "timestamp": "2018-10-10T20:38:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3673d711-2445-4eb3-ad71-b3d77ecb8fc9", "eventTime": "2018-10-10T20:38:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae7dd238-30f5-459b-94f9-7efc03c0a108", "record_id": "flaws_cloudtrail:0000510:ae7dd238-30f5-459b-94f9-7efc03c0a108", "row_index": 510, "timestamp": "2018-10-10T20:38:11Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae7dd238-30f5-459b-94f9-7efc03c0a108", "eventTime": "2018-10-10T20:38:11Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "548019b82-908a-414b-9e12-cf93993c43af", "record_id": "flaws_cloudtrail:0000511:548019b82-908a-414b-9e12-cf93993c43af", "row_index": 511, "timestamp": "2018-10-10T20:38:11Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "548019b82-908a-414b-9e12-cf93993c43af", "eventTime": "2018-10-10T20:38:11Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ed3bef5-5d9f-4f4e-97ad-9e1bea84ee9f", "record_id": "flaws_cloudtrail:0000512:5ed3bef5-5d9f-4f4e-97ad-9e1bea84ee9f", "row_index": 512, "timestamp": "2018-10-10T20:38:11Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ed3bef5-5d9f-4f4e-97ad-9e1bea84ee9f", "eventTime": "2018-10-10T20:38:11Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbcef4cf-657d-4c4e-9883-b837d16ee3dc", "record_id": "flaws_cloudtrail:0000513:cbcef4cf-657d-4c4e-9883-b837d16ee3dc", "row_index": 513, "timestamp": "2018-10-10T20:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbcef4cf-657d-4c4e-9883-b837d16ee3dc", "eventTime": "2018-10-10T20:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf719a0f-0dd6-4375-9285-81f0b46bb697", "record_id": "flaws_cloudtrail:0000514:bf719a0f-0dd6-4375-9285-81f0b46bb697", "row_index": 514, "timestamp": "2018-10-10T20:38:13Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf719a0f-0dd6-4375-9285-81f0b46bb697", "eventTime": "2018-10-10T20:38:13Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4017fe4-b6d4-4eed-99fc-740476494fe5", "record_id": "flaws_cloudtrail:0000515:f4017fe4-b6d4-4eed-99fc-740476494fe5", "row_index": 515, "timestamp": "2018-10-10T20:38:13Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4017fe4-b6d4-4eed-99fc-740476494fe5", "eventTime": "2018-10-10T20:38:13Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201f6620-7bae-47cc-9877-af1ac291522", "record_id": "flaws_cloudtrail:0000516:201f6620-7bae-47cc-9877-af1ac291522", "row_index": 516, "timestamp": "2018-10-10T20:38:13Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201f6620-7bae-47cc-9877-af1ac291522", "eventTime": "2018-10-10T20:38:13Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a50ca50-debd-4f8b-879d-6e2b4ec5db0a", "record_id": "flaws_cloudtrail:0000517:0a50ca50-debd-4f8b-879d-6e2b4ec5db0a", "row_index": 517, "timestamp": "2018-10-10T20:38:14Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a50ca50-debd-4f8b-879d-6e2b4ec5db0a", "eventTime": "2018-10-10T20:38:14Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34e350e-658d-48d9-b56c-f059c3fa6f22", "record_id": "flaws_cloudtrail:0000518:f34e350e-658d-48d9-b56c-f059c3fa6f22", "row_index": 518, "timestamp": "2018-10-10T20:38:14Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34e350e-658d-48d9-b56c-f059c3fa6f22", "eventTime": "2018-10-10T20:38:14Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29156c-b112-488c-844a-3fbf317eea08", "record_id": "flaws_cloudtrail:0000519:29156c-b112-488c-844a-3fbf317eea08", "row_index": 519, "timestamp": "2018-10-10T20:38:14Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29156c-b112-488c-844a-3fbf317eea08", "eventTime": "2018-10-10T20:38:14Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf37bf4-a6af-4ff9-a01b-0414d324b071", "record_id": "flaws_cloudtrail:0000520:baf37bf4-a6af-4ff9-a01b-0414d324b071", "row_index": 520, "timestamp": "2018-10-10T20:38:14Z", "event_type": "DescribeParameters", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf37bf4-a6af-4ff9-a01b-0414d324b071", "eventTime": "2018-10-10T20:38:14Z", "eventName": "DescribeParameters", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e150b22b-6892-4be4-b815-e53915ffd", "record_id": "flaws_cloudtrail:0000521:e150b22b-6892-4be4-b815-e53915ffd", "row_index": 521, "timestamp": "2018-10-10T20:38:14Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e150b22b-6892-4be4-b815-e53915ffd", "eventTime": "2018-10-10T20:38:14Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "765c66b0-861c-4cf9-b1ae-a157086c8e9f", "record_id": "flaws_cloudtrail:0000522:765c66b0-861c-4cf9-b1ae-a157086c8e9f", "row_index": 522, "timestamp": "2018-10-10T20:38:14Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "765c66b0-861c-4cf9-b1ae-a157086c8e9f", "eventTime": "2018-10-10T20:38:14Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05bb6c9d-b24b-432a-88a2-f153d8647b6a", "record_id": "flaws_cloudtrail:0000523:05bb6c9d-b24b-432a-88a2-f153d8647b6a", "row_index": 523, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05bb6c9d-b24b-432a-88a2-f153d8647b6a", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf4864e-8fe0-45be-8566-412a10c4e318", "record_id": "flaws_cloudtrail:0000524:fdf4864e-8fe0-45be-8566-412a10c4e318", "row_index": 524, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf4864e-8fe0-45be-8566-412a10c4e318", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acec0a3c-eebc-4d80-8f44-bc0b683c3be9", "record_id": "flaws_cloudtrail:0000525:acec0a3c-eebc-4d80-8f44-bc0b683c3be9", "row_index": 525, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": ["arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46"], "raw_record_size_bytes": 861, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acec0a3c-eebc-4d80-8f44-bc0b683c3be9", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "333f3701-d6b9-433a-8dbc-b914de8c3c46"}, "resources": [{"ARN": "arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f72c118-1127-4ae8-8157-cf2c888eee56", "record_id": "flaws_cloudtrail:0000526:8f72c118-1127-4ae8-8157-cf2c888eee56", "row_index": 526, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f72c118-1127-4ae8-8157-cf2c888eee56", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b8ade76-de4b-4c21-a432-f7f7ef9a0861", "record_id": "flaws_cloudtrail:0000527:9b8ade76-de4b-4c21-a432-f7f7ef9a0861", "row_index": 527, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": ["arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df"], "raw_record_size_bytes": 863, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b8ade76-de4b-4c21-a432-f7f7ef9a0861", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "291eab4f-a7dd-48aa-bb7d-35738037a5df"}, "resources": [{"ARN": "arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "880c6cde-8504-43c7-8c97-ad858d65e865", "record_id": "flaws_cloudtrail:0000528:880c6cde-8504-43c7-8c97-ad858d65e865", "row_index": 528, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "880c6cde-8504-43c7-8c97-ad858d65e865", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02eba055-dc95-4836-a899-5028f864458d7", "record_id": "flaws_cloudtrail:0000529:02eba055-dc95-4836-a899-5028f864458d7", "row_index": 529, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": ["arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1"], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02eba055-dc95-4836-a899-5028f864458d7", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "56adddbf-ecf3-48d0-9558-add76fe166e1"}, "resources": [{"ARN": "arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2097fd-6f6c-4d39-b7f2-dd340327d5d6", "record_id": "flaws_cloudtrail:0000530:ed2097fd-6f6c-4d39-b7f2-dd340327d5d6", "row_index": 530, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2097fd-6f6c-4d39-b7f2-dd340327d5d6", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ec005e4-4a3a-49e6-a650-082f61cff957", "record_id": "flaws_cloudtrail:0000531:9ec005e4-4a3a-49e6-a650-082f61cff957", "row_index": 531, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2"], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ec005e4-4a3a-49e6-a650-082f61cff957", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "c072ef61-130e-4a95-ab1d-b1c419c9f2c2"}, "resources": [{"ARN": "arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb77c265-2111-411c-bc9d-2939b8fe269c", "record_id": "flaws_cloudtrail:0000532:cb77c265-2111-411c-bc9d-2939b8fe269c", "row_index": 532, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb77c265-2111-411c-bc9d-2939b8fe269c", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42260-cee6-4f81-bfe2-232266de2e8c", "record_id": "flaws_cloudtrail:0000533:42260-cee6-4f81-bfe2-232266de2e8c", "row_index": 533, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42260-cee6-4f81-bfe2-232266de2e8c", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55dc3a75-e3a8-42c4-abf7-595b6c625d07", "record_id": "flaws_cloudtrail:0000534:55dc3a75-e3a8-42c4-abf7-595b6c625d07", "row_index": 534, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55dc3a75-e3a8-42c4-abf7-595b6c625d07", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cacf4d5-d613-4c90-b802-a8595eb8b664", "record_id": "flaws_cloudtrail:0000535:9cacf4d5-d613-4c90-b802-a8595eb8b664", "row_index": 535, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cacf4d5-d613-4c90-b802-a8595eb8b664", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f83884-0cdc-4e3e-90a4-3ec9d3d6d9b5", "record_id": "flaws_cloudtrail:0000536:7f83884-0cdc-4e3e-90a4-3ec9d3d6d9b5", "row_index": 536, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": ["arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72"], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f83884-0cdc-4e3e-90a4-3ec9d3d6d9b5", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "9d2bcafd-8899-4b14-bb94-ea3aa4eaef72"}, "resources": [{"ARN": "arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55d25a8-ef14-4982-a06d-45e34e48589f", "record_id": "flaws_cloudtrail:0000537:a55d25a8-ef14-4982-a06d-45e34e48589f", "row_index": 537, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55d25a8-ef14-4982-a06d-45e34e48589f", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20a9c09e-1123-4a36-9c1f-795a58228910", "record_id": "flaws_cloudtrail:0000538:20a9c09e-1123-4a36-9c1f-795a58228910", "row_index": 538, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20a9c09e-1123-4a36-9c1f-795a58228910", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa028560-d802-457c-ac25-7a2bf3e9c485", "record_id": "flaws_cloudtrail:0000539:aa028560-d802-457c-ac25-7a2bf3e9c485", "row_index": 539, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa028560-d802-457c-ac25-7a2bf3e9c485", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "980ea942-7a35-4f58-bc62-1fa9fdcf90f6", "record_id": "flaws_cloudtrail:0000540:980ea942-7a35-4f58-bc62-1fa9fdcf90f6", "row_index": 540, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "980ea942-7a35-4f58-bc62-1fa9fdcf90f6", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53a69846-e006-4e97-b182-b64cc64fed80", "record_id": "flaws_cloudtrail:0000541:53a69846-e006-4e97-b182-b64cc64fed80", "row_index": 541, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7"], "raw_record_size_bytes": 856, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53a69846-e006-4e97-b182-b64cc64fed80", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "d20504bd-8234-49f4-ae0a-3344893e42a7"}, "resources": [{"ARN": "arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89d737595-0f83-46b2-b9e3-436db4e2f45f", "record_id": "flaws_cloudtrail:0000542:89d737595-0f83-46b2-b9e3-436db4e2f45f", "row_index": 542, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89d737595-0f83-46b2-b9e3-436db4e2f45f", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e14db5a-fd2e-431c-b9d2-1b76fb896997", "record_id": "flaws_cloudtrail:0000543:8e14db5a-fd2e-431c-b9d2-1b76fb896997", "row_index": 543, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e14db5a-fd2e-431c-b9d2-1b76fb896997", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b46d64f-3b6a-4a17-a6b8-1b212e233e2a", "record_id": "flaws_cloudtrail:0000544:9b46d64f-3b6a-4a17-a6b8-1b212e233e2a", "row_index": 544, "timestamp": "2018-10-10T20:38:15Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b46d64f-3b6a-4a17-a6b8-1b212e233e2a", "eventTime": "2018-10-10T20:38:15Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9a55d9-6bc0-4908-8d3a-12972e6c038e", "record_id": "flaws_cloudtrail:0000545:fb9a55d9-6bc0-4908-8d3a-12972e6c038e", "row_index": 545, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9a55d9-6bc0-4908-8d3a-12972e6c038e", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f4f8467-9c54-486f-94dc-f6be8d568290", "record_id": "flaws_cloudtrail:0000546:1f4f8467-9c54-486f-94dc-f6be8d568290", "row_index": 546, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": ["arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08"], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f4f8467-9c54-486f-94dc-f6be8d568290", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "ba47cbd4-200e-4fad-8db4-7b414d394b08"}, "resources": [{"ARN": "arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9ddde7-f91e-4d51-8457-f7b7d72219f", "record_id": "flaws_cloudtrail:0000547:ec9ddde7-f91e-4d51-8457-f7b7d72219f", "row_index": 547, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9ddde7-f91e-4d51-8457-f7b7d72219f", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0251a9fb-9fdd-4a8e-ab63-80617a030a2", "record_id": "flaws_cloudtrail:0000548:0251a9fb-9fdd-4a8e-ab63-80617a030a2", "row_index": 548, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0251a9fb-9fdd-4a8e-ab63-80617a030a2", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091180ff0-9eb2-4505-84a5-45ce4f9bd030", "record_id": "flaws_cloudtrail:0000549:091180ff0-9eb2-4505-84a5-45ce4f9bd030", "row_index": 549, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091180ff0-9eb2-4505-84a5-45ce4f9bd030", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eea99f3-4ac7-4bdf-a1e2-d02bd7c5657e", "record_id": "flaws_cloudtrail:0000550:6eea99f3-4ac7-4bdf-a1e2-d02bd7c5657e", "row_index": 550, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eea99f3-4ac7-4bdf-a1e2-d02bd7c5657e", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0a12c75-aca7-4682-ad23-50a86e9b8424", "record_id": "flaws_cloudtrail:0000551:c0a12c75-aca7-4682-ad23-50a86e9b8424", "row_index": 551, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0a12c75-aca7-4682-ad23-50a86e9b8424", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdec2fd4-595f-4d37-aeef-14943f94a73c", "record_id": "flaws_cloudtrail:0000552:cdec2fd4-595f-4d37-aeef-14943f94a73c", "row_index": 552, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452"], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdec2fd4-595f-4d37-aeef-14943f94a73c", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "285af51d-8b8c-469b-8701-0b42c0f09452"}, "resources": [{"ARN": "arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1494e9dc-b719-44b1-a79d-77fa07a6d206", "record_id": "flaws_cloudtrail:0000553:1494e9dc-b719-44b1-a79d-77fa07a6d206", "row_index": 553, "timestamp": "2018-10-10T20:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1494e9dc-b719-44b1-a79d-77fa07a6d206", "eventTime": "2018-10-10T20:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25236b-da86-4483-a3e2-77ff3ee695cf", "record_id": "flaws_cloudtrail:0000554:b25236b-da86-4483-a3e2-77ff3ee695cf", "row_index": 554, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25236b-da86-4483-a3e2-77ff3ee695cf", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2e242106-d2ce-4a79-be5e-3e9a96b59e04", "record_id": "flaws_cloudtrail:0000555:e2e242106-d2ce-4a79-be5e-3e9a96b59e04", "row_index": 555, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2e242106-d2ce-4a79-be5e-3e9a96b59e04", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2c00af-6cde-42d5-9367-7862fc8337cd", "record_id": "flaws_cloudtrail:0000556:4c2c00af-6cde-42d5-9367-7862fc8337cd", "row_index": 556, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2c00af-6cde-42d5-9367-7862fc8337cd", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63755b-5da3-4ac1-99a0-4393c96da8b9", "record_id": "flaws_cloudtrail:0000557:63755b-5da3-4ac1-99a0-4393c96da8b9", "row_index": 557, "timestamp": "2018-10-10T20:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63755b-5da3-4ac1-99a0-4393c96da8b9", "eventTime": "2018-10-10T20:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4536d0a2-147b-4a58-b023-eb67ec9ec810", "record_id": "flaws_cloudtrail:0000558:4536d0a2-147b-4a58-b023-eb67ec9ec810", "row_index": 558, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": ["arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0"], "raw_record_size_bytes": 867, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4536d0a2-147b-4a58-b023-eb67ec9ec810", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0"}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fcd0ee6-50c9-4d71-857a-60fa0183d80c", "record_id": "flaws_cloudtrail:0000559:7fcd0ee6-50c9-4d71-857a-60fa0183d80c", "row_index": 559, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fcd0ee6-50c9-4d71-857a-60fa0183d80c", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9c96e2d-aea4-47ca-a471-874f75fd4c91", "record_id": "flaws_cloudtrail:0000560:c9c96e2d-aea4-47ca-a471-874f75fd4c91", "row_index": 560, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9c96e2d-aea4-47ca-a471-874f75fd4c91", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76805f8a-a2c6-4a82-94ab-c7c62ff74aeb", "record_id": "flaws_cloudtrail:0000561:76805f8a-a2c6-4a82-94ab-c7c62ff74aeb", "row_index": 561, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": ["arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde"], "raw_record_size_bytes": 867, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76805f8a-a2c6-4a82-94ab-c7c62ff74aeb", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "405e36fc-81bf-4f3a-9026-1b1ae2d45bde"}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dde260c4-3866-4c6a-ab43-04914a2d", "record_id": "flaws_cloudtrail:0000562:dde260c4-3866-4c6a-ab43-04914a2d", "row_index": 562, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dde260c4-3866-4c6a-ab43-04914a2d", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9c96e2d-aea4-47ca-a471-874f75fd4c91", "record_id": "flaws_cloudtrail:0000563:c9c96e2d-aea4-47ca-a471-874f75fd4c91", "row_index": 563, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9c96e2d-aea4-47ca-a471-874f75fd4c91", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca1fec69-a239-4c90-8fc8-d1a0f43f51aa", "record_id": "flaws_cloudtrail:0000564:ca1fec69-a239-4c90-8fc8-d1a0f43f51aa", "row_index": 564, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca1fec69-a239-4c90-8fc8-d1a0f43f51aa", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d15be2c-1c13-4feb-9b06-5bf01d0a598b", "record_id": "flaws_cloudtrail:0000565:1d15be2c-1c13-4feb-9b06-5bf01d0a598b", "row_index": 565, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": ["arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3"], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d15be2c-1c13-4feb-9b06-5bf01d0a598b", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "6ef88f45-60b6-42ea-a522-93ab62f1d2e3"}, "resources": [{"ARN": "arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d7eca8-920a-446c-935c-c0a869b28da2", "record_id": "flaws_cloudtrail:0000566:e0d7eca8-920a-446c-935c-c0a869b28da2", "row_index": 566, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": ["arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d"], "raw_record_size_bytes": 867, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d7eca8-920a-446c-935c-c0a869b28da2", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "f350ffc4-413d-4518-906c-d154df0c9d8d"}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8484d241-b32a-456f-bde9-87d769402", "record_id": "flaws_cloudtrail:0000567:8484d241-b32a-456f-bde9-87d769402", "row_index": 567, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8484d241-b32a-456f-bde9-87d769402", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15f941651-d905-42bd-8d3a-101c9769c8c1", "record_id": "flaws_cloudtrail:0000568:15f941651-d905-42bd-8d3a-101c9769c8c1", "row_index": 568, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15f941651-d905-42bd-8d3a-101c9769c8c1", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329365d62-0ae0-4235-aa13-74b0280d38f3", "record_id": "flaws_cloudtrail:0000569:329365d62-0ae0-4235-aa13-74b0280d38f3", "row_index": 569, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329365d62-0ae0-4235-aa13-74b0280d38f3", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15e9c43-8a7e-4826-a1a5-288d86717d1d", "record_id": "flaws_cloudtrail:0000570:a15e9c43-8a7e-4826-a1a5-288d86717d1d", "row_index": 570, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15e9c43-8a7e-4826-a1a5-288d86717d1d", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d7a8ee-879b-4310-a6ab-836597c90ded", "record_id": "flaws_cloudtrail:0000571:c3d7a8ee-879b-4310-a6ab-836597c90ded", "row_index": 571, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeKey", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": ["arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e"], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d7a8ee-879b-4310-a6ab-836597c90ded", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "39f741180-676c-4cdb-8c23-369bc095896e"}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f84bc14f-810d-4016-b309-f257e0d6dcf6", "record_id": "flaws_cloudtrail:0000572:f84bc14f-810d-4016-b309-f257e0d6dcf6", "row_index": 572, "timestamp": "2018-10-10T20:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f84bc14f-810d-4016-b309-f257e0d6dcf6", "eventTime": "2018-10-10T20:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533359-ab5f-4082-a17a-7937da270405", "record_id": "flaws_cloudtrail:0000573:533359-ab5f-4082-a17a-7937da270405", "row_index": 573, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533359-ab5f-4082-a17a-7937da270405", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b5e6dbd-8946-4c30-a118-1e70a0d1119d", "record_id": "flaws_cloudtrail:0000574:6b5e6dbd-8946-4c30-a118-1e70a0d1119d", "row_index": 574, "timestamp": "2018-10-10T20:38:16Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b5e6dbd-8946-4c30-a118-1e70a0d1119d", "eventTime": "2018-10-10T20:38:16Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "096533f08-ef36-46eb-9a97-e359573f844", "record_id": "flaws_cloudtrail:0000575:096533f08-ef36-46eb-9a97-e359573f844", "row_index": 575, "timestamp": "2018-10-10T20:38:16Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "096533f08-ef36-46eb-9a97-e359573f844", "eventTime": "2018-10-10T20:38:16Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73be3e99-93b8-4aea-a07c-4077d6ad3a3e", "record_id": "flaws_cloudtrail:0000576:73be3e99-93b8-4aea-a07c-4077d6ad3a3e", "row_index": 576, "timestamp": "2018-10-10T20:38:16Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73be3e99-93b8-4aea-a07c-4077d6ad3a3e", "eventTime": "2018-10-10T20:38:16Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9678d5-08e9-4e19-9911-17c4b4523f9b", "record_id": "flaws_cloudtrail:0000577:0e9678d5-08e9-4e19-9911-17c4b4523f9b", "row_index": 577, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9678d5-08e9-4e19-9911-17c4b4523f9b", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e749c6f-1b3a-4b63-96fc-583146f5e842", "record_id": "flaws_cloudtrail:0000578:2e749c6f-1b3a-4b63-96fc-583146f5e842", "row_index": 578, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e749c6f-1b3a-4b63-96fc-583146f5e842", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e70fa48-79ce-46ed-9acf-fe4f142d9e56", "record_id": "flaws_cloudtrail:0000579:8e70fa48-79ce-46ed-9acf-fe4f142d9e56", "row_index": 579, "timestamp": "2018-10-10T20:38:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e70fa48-79ce-46ed-9acf-fe4f142d9e56", "eventTime": "2018-10-10T20:38:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bdf029-d6c3-4ab9-8e4e-14bae30fd36b", "record_id": "flaws_cloudtrail:0000580:b8bdf029-d6c3-4ab9-8e4e-14bae30fd36b", "row_index": 580, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": ["arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46"], "raw_record_size_bytes": 873, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bdf029-d6c3-4ab9-8e4e-14bae30fd36b", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "333f3701-d6b9-433a-8dbc-b914de8c3c46"}, "resources": [{"ARN": "arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cffe323-a3db-4013-839a-dad440f170f6", "record_id": "flaws_cloudtrail:0000581:7cffe323-a3db-4013-839a-dad440f170f6", "row_index": 581, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": ["arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df"], "raw_record_size_bytes": 872, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cffe323-a3db-4013-839a-dad440f170f6", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "291eab4f-a7dd-48aa-bb7d-35738037a5df"}, "resources": [{"ARN": "arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b25a25-6054-4ac8-85d4-d01f038613", "record_id": "flaws_cloudtrail:0000582:54b25a25-6054-4ac8-85d4-d01f038613", "row_index": 582, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": ["arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1"], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b25a25-6054-4ac8-85d4-d01f038613", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "56adddbf-ecf3-48d0-9558-add76fe166e1"}, "resources": [{"ARN": "arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8760a26-988a-4562-9737-f4c6a9f6e969", "record_id": "flaws_cloudtrail:0000583:d8760a26-988a-4562-9737-f4c6a9f6e969", "row_index": 583, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2"], "raw_record_size_bytes": 862, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8760a26-988a-4562-9737-f4c6a9f6e969", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "c072ef61-130e-4a95-ab1d-b1c419c9f2c2"}, "resources": [{"ARN": "arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c9c7356-4f91-4557-b31c-c2ceee30ea42", "record_id": "flaws_cloudtrail:0000584:1c9c7356-4f91-4557-b31c-c2ceee30ea42", "row_index": 584, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-3"}, "resource_arns": ["arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72"], "raw_record_size_bytes": 866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c9c7356-4f91-4557-b31c-c2ceee30ea42", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "9d2bcafd-8899-4b14-bb94-ea3aa4eaef72"}, "resources": [{"ARN": "arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "272d4c3a-0b25-4b45-a4b0-967a94b8c104", "record_id": "flaws_cloudtrail:0000585:272d4c3a-0b25-4b45-a4b0-967a94b8c104", "row_index": 585, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7"], "raw_record_size_bytes": 866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "272d4c3a-0b25-4b45-a4b0-967a94b8c104", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "d20504bd-8234-49f4-ae0a-3344893e42a7"}, "resources": [{"ARN": "arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d86edec-0005-4664-b743-b592bcbbee6e", "record_id": "flaws_cloudtrail:0000586:3d86edec-0005-4664-b743-b592bcbbee6e", "row_index": 586, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-east-2"}, "resource_arns": ["arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08"], "raw_record_size_bytes": 866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d86edec-0005-4664-b743-b592bcbbee6e", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "ba47cbd4-200e-4fad-8db4-7b414d394b08"}, "resources": [{"ARN": "arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96a04f0c-fb7a-4020-ba5f-68ec2b160da1", "record_id": "flaws_cloudtrail:0000587:96a04f0c-fb7a-4020-ba5f-68ec2b160da1", "row_index": 587, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452"], "raw_record_size_bytes": 866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96a04f0c-fb7a-4020-ba5f-68ec2b160da1", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "285af51d-8b8c-469b-8701-0b42c0f09452"}, "resources": [{"ARN": "arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a94d9923-114f-47be-a79d-dd7203871afe", "record_id": "flaws_cloudtrail:0000588:a94d9923-114f-47be-a79d-dd7203871afe", "row_index": 588, "timestamp": "2018-10-10T20:38:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a94d9923-114f-47be-a79d-dd7203871afe", "eventTime": "2018-10-10T20:38:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52476-f31b-4053-ab6f-b3ff75408cc0", "record_id": "flaws_cloudtrail:0000589:a52476-f31b-4053-ab6f-b3ff75408cc0", "row_index": 589, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-1"}, "resource_arns": ["arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0"], "raw_record_size_bytes": 874, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52476-f31b-4053-ab6f-b3ff75408cc0", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0"}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d25025-8a0a-4c00-9bae-3490a8015599", "record_id": "flaws_cloudtrail:0000590:d25025-8a0a-4c00-9bae-3490a8015599", "row_index": 590, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-northeast-2"}, "resource_arns": ["arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde"], "raw_record_size_bytes": 874, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d25025-8a0a-4c00-9bae-3490a8015599", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "405e36fc-81bf-4f3a-9026-1b1ae2d45bde"}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7523e56a-c98d-45aa-b01b-8f0a2b16fb3f", "record_id": "flaws_cloudtrail:0000591:7523e56a-c98d-45aa-b01b-8f0a2b16fb3f", "row_index": 591, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": ["arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3"], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7523e56a-c98d-45aa-b01b-8f0a2b16fb3f", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "6ef88f45-60b6-42ea-a522-93ab62f1d2e3"}, "resources": [{"ARN": "arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf7fb50-064d-4be7-a056-3c72193c", "record_id": "flaws_cloudtrail:0000592:8bf7fb50-064d-4be7-a056-3c72193c", "row_index": 592, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": ["arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d"], "raw_record_size_bytes": 872, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf7fb50-064d-4be7-a056-3c72193c", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "f350ffc4-413d-4518-906c-d154df0c9d8d"}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b63b427-76fb-47fa-816e-68ca3b16d9c2", "record_id": "flaws_cloudtrail:0000593:1b63b427-76fb-47fa-816e-68ca3b16d9c2", "row_index": 593, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetKeyRotationStatus", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-2"}, "resource_arns": ["arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e"], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b63b427-76fb-47fa-816e-68ca3b16d9c2", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetKeyRotationStatus", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "39f741180-676c-4cdb-8c23-369bc095896e"}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b1ed261-d9b6-40ba-804d-cefad722e512", "record_id": "flaws_cloudtrail:0000594:7b1ed261-d9b6-40ba-804d-cefad722e512", "row_index": 594, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b1ed261-d9b6-40ba-804d-cefad722e512", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d416da-8bab-4f01-a9a8-9beb0fcaeab7", "record_id": "flaws_cloudtrail:0000595:c6d416da-8bab-4f01-a9a8-9beb0fcaeab7", "row_index": 595, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d416da-8bab-4f01-a9a8-9beb0fcaeab7", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f98924da-922d-4d82-94e7-8ac9e7d71585", "record_id": "flaws_cloudtrail:0000596:f98924da-922d-4d82-94e7-8ac9e7d71585", "row_index": 596, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f98924da-922d-4d82-94e7-8ac9e7d71585", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd8da3b1-68f9-4d60-b076-12dc6dd89fee", "record_id": "flaws_cloudtrail:0000597:cd8da3b1-68f9-4d60-b076-12dc6dd89fee", "row_index": 597, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd8da3b1-68f9-4d60-b076-12dc6dd89fee", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "094cb8b7-1d58-43e5-9306-bd8e23a25ebb", "record_id": "flaws_cloudtrail:0000598:094cb8b7-1d58-43e5-9306-bd8e23a25ebb", "row_index": 598, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "094cb8b7-1d58-43e5-9306-bd8e23a25ebb", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083947a-1f9a-4245-823e-6d6ba3f313e2", "record_id": "flaws_cloudtrail:0000599:083947a-1f9a-4245-823e-6d6ba3f313e2", "row_index": 599, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083947a-1f9a-4245-823e-6d6ba3f313e2", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fa656dc-5159-47b1-b726-c2fbb74643", "record_id": "flaws_cloudtrail:0000600:2fa656dc-5159-47b1-b726-c2fbb74643", "row_index": 600, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fa656dc-5159-47b1-b726-c2fbb74643", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1eb9bf4-223a-477c-b39e-24afd6cb420b", "record_id": "flaws_cloudtrail:0000601:f1eb9bf4-223a-477c-b39e-24afd6cb420b", "row_index": 601, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1eb9bf4-223a-477c-b39e-24afd6cb420b", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec97e17e-5446-4f12-a04a-24fa6964d052", "record_id": "flaws_cloudtrail:0000602:ec97e17e-5446-4f12-a04a-24fa6964d052", "row_index": 602, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec97e17e-5446-4f12-a04a-24fa6964d052", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65dad5aa-3aa6-413f-93bd-1e2ebe87d2bc", "record_id": "flaws_cloudtrail:0000603:65dad5aa-3aa6-413f-93bd-1e2ebe87d2bc", "row_index": 603, "timestamp": "2018-10-10T20:38:18Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65dad5aa-3aa6-413f-93bd-1e2ebe87d2bc", "eventTime": "2018-10-10T20:38:18Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "[aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "461182be1-62f0-465e-a8c8-bafb8563b9f5", "record_id": "flaws_cloudtrail:0000604:461182be1-62f0-465e-a8c8-bafb8563b9f5", "row_index": 604, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-south-1"}, "resource_arns": ["arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3"], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "461182be1-62f0-465e-a8c8-bafb8563b9f5", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "6ef88f45-60b6-42ea-a522-93ab62f1d2e3", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a64f33e-3df5-4e5d-910c-994b0ad201e4", "record_id": "flaws_cloudtrail:0000605:4a64f33e-3df5-4e5d-910c-994b0ad201e4", "row_index": 605, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ap-southeast-1"}, "resource_arns": ["arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d"], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a64f33e-3df5-4e5d-910c-994b0ad201e4", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "f350ffc4-413d-4518-906c-d154df0c9d8d", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d32c3e-e6ce-4d31-9d80-18014ee17a", "record_id": "flaws_cloudtrail:0000606:a8d32c3e-e6ce-4d31-9d80-18014ee17a", "row_index": 606, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "ca-central-1"}, "resource_arns": ["arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46"], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d32c3e-e6ce-4d31-9d80-18014ee17a", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "333f3701-d6b9-433a-8dbc-b914de8c3c46", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ec4489-1447-4336-9165-32bf35798df5", "record_id": "flaws_cloudtrail:0000607:12ec4489-1447-4336-9165-32bf35798df5", "row_index": 607, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-central-1"}, "resource_arns": ["arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df"], "raw_record_size_bytes": 887, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ec4489-1447-4336-9165-32bf35798df5", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "291eab4f-a7dd-48aa-bb7d-35738037a5df", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d51d8e-ad21-4a91-9584-08db122018f80", "record_id": "flaws_cloudtrail:0000608:c2d51d8e-ad21-4a91-9584-08db122018f80", "row_index": 608, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-1"}, "resource_arns": ["arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1"], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d51d8e-ad21-4a91-9584-08db122018f80", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "56adddbf-ecf3-48d0-9558-add76fe166e1", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27d1c302-302d-419c-853d-aadc64aa396f", "record_id": "flaws_cloudtrail:0000609:27d1c302-302d-419c-853d-aadc64aa396f", "row_index": 609, "timestamp": "2018-10-10T20:38:19Z", "event_type": "GetKeyPolicy", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.0.85.253", "user_agent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2"], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27d1c302-302d-419c-853d-aadc64aa396f", "eventTime": "2018-10-10T20:38:19Z", "eventName": "GetKeyPolicy", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.0.85.253", "userAgent": "aws-sdk-nodejs/2.331.0 linux/v8.11.2 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyId": "c072ef61-130e-4a95-ab1d-b1c419c9f2c2", "policyName": "default"}, "resources": [{"ARN": "arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}