Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c567a0a-c930-4c8f-9409-6b90a484abfa", "record_id": "flaws_cloudtrail:0000000:5c567a0a-c930-4c8f-9409-6b90a484abfa", "row_index": 0, "timestamp": "2018-07-29T15:28:24Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c567a0a-c930-4c8f-9409-6b90a484abfa", "eventTime": "2018-07-29T15:28:24Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e831ded-aff0-4300-b1c6-bbec9f611b16", "record_id": "flaws_cloudtrail:0000001:1e831ded-aff0-4300-b1c6-bbec9f611b16", "row_index": 1, "timestamp": "2018-07-29T15:28:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e831ded-aff0-4300-b1c6-bbec9f611b16", "eventTime": "2018-07-29T15:28:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "556e6572-4373-49e1-98a3-1d4856f3d459", "record_id": "flaws_cloudtrail:0000002:556e6572-4373-49e1-98a3-1d4856f3d459", "row_index": 2, "timestamp": "2018-07-29T15:28:25Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "556e6572-4373-49e1-98a3-1d4856f3d459", "eventTime": "2018-07-29T15:28:25Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1485cefa-c622-42e2-ae30-34cb563da936", "record_id": "flaws_cloudtrail:0000003:1485cefa-c622-42e2-ae30-34cb563da936", "row_index": 3, "timestamp": "2018-07-29T15:28:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1485cefa-c622-42e2-ae30-34cb563da936", "eventTime": "2018-07-29T15:28:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7594d3ff-c41e-48a6-be94-8f2c1fb13afe", "record_id": "flaws_cloudtrail:0000004:7594d3ff-c41e-48a6-be94-8f2c1fb13afe", "row_index": 4, "timestamp": "2018-07-29T15:28:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7594d3ff-c41e-48a6-be94-8f2c1fb13afe", "eventTime": "2018-07-29T15:28:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834874c26-a1af-4a4a-a84b-3e809ab359a7", "record_id": "flaws_cloudtrail:0000005:834874c26-a1af-4a4a-a84b-3e809ab359a7", "row_index": 5, "timestamp": "2018-07-29T15:28:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834874c26-a1af-4a4a-a84b-3e809ab359a7", "eventTime": "2018-07-29T15:28:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dcfcfa8-a559-45de-97a0-b04a3a3e23ac", "record_id": "flaws_cloudtrail:0000006:0dcfcfa8-a559-45de-97a0-b04a3a3e23ac", "row_index": 6, "timestamp": "2018-07-29T15:28:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dcfcfa8-a559-45de-97a0-b04a3a3e23ac", "eventTime": "2018-07-29T15:28:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f1d8e2-7f07-4b00-bc3c-877b7dd89f70", "record_id": "flaws_cloudtrail:0000007:91f1d8e2-7f07-4b00-bc3c-877b7dd89f70", "row_index": 7, "timestamp": "2018-07-29T15:28:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f1d8e2-7f07-4b00-bc3c-877b7dd89f70", "eventTime": "2018-07-29T15:28:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df7c4bdb-6207-4a3a-aceb-6a91edda0c09", "record_id": "flaws_cloudtrail:0000008:df7c4bdb-6207-4a3a-aceb-6a91edda0c09", "row_index": 8, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df7c4bdb-6207-4a3a-aceb-6a91edda0c09", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "908a9583-cc90-4d6c-804a-567b2afddd7a", "record_id": "flaws_cloudtrail:0000009:908a9583-cc90-4d6c-804a-567b2afddd7a", "row_index": 9, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "908a9583-cc90-4d6c-804a-567b2afddd7a", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bcb392-b117-4df6-8fee-4756c4077f46", "record_id": "flaws_cloudtrail:0000010:03bcb392-b117-4df6-8fee-4756c4077f46", "row_index": 10, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bcb392-b117-4df6-8fee-4756c4077f46", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6569e0ff-62e8-4338-9a2b-3bd4e51839cc", "record_id": "flaws_cloudtrail:0000011:6569e0ff-62e8-4338-9a2b-3bd4e51839cc", "row_index": 11, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6569e0ff-62e8-4338-9a2b-3bd4e51839cc", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698abe0c-46e9-40ed-a630-247c640c310c", "record_id": "flaws_cloudtrail:0000012:698abe0c-46e9-40ed-a630-247c640c310c", "row_index": 12, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698abe0c-46e9-40ed-a630-247c640c310c", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b2dc88-98c5-4929-95cc-d8a722fa6b6c", "record_id": "flaws_cloudtrail:0000013:00b2dc88-98c5-4929-95cc-d8a722fa6b6c", "row_index": 13, "timestamp": "2018-07-29T15:28:27Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b2dc88-98c5-4929-95cc-d8a722fa6b6c", "eventTime": "2018-07-29T15:28:27Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89a484226-d3f2-430f-ab27-d0c059fb03a5", "record_id": "flaws_cloudtrail:0000014:89a484226-d3f2-430f-ab27-d0c059fb03a5", "row_index": 14, "timestamp": "2018-07-29T15:28:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89a484226-d3f2-430f-ab27-d0c059fb03a5", "eventTime": "2018-07-29T15:28:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a5fc53-706f-4d06-9f20-5303a7cc0797", "record_id": "flaws_cloudtrail:0000015:76a5fc53-706f-4d06-9f20-5303a7cc0797", "row_index": 15, "timestamp": "2018-07-29T15:28:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a5fc53-706f-4d06-9f20-5303a7cc0797", "eventTime": "2018-07-29T15:28:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b3fc3a9-553d-4eb8-a86c-ae5854aedabf", "record_id": "flaws_cloudtrail:0000016:6b3fc3a9-553d-4eb8-a86c-ae5854aedabf", "row_index": 16, "timestamp": "2018-07-29T15:28:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b3fc3a9-553d-4eb8-a86c-ae5854aedabf", "eventTime": "2018-07-29T15:28:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23f6407f-6283-4c2c-b128-1af6e2a18d85", "record_id": "flaws_cloudtrail:0000017:23f6407f-6283-4c2c-b128-1af6e2a18d85", "row_index": 17, "timestamp": "2018-07-29T15:28:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23f6407f-6283-4c2c-b128-1af6e2a18d85", "eventTime": "2018-07-29T15:28:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "447eac13-32d0-45f6-967b-859eb8b5c830", "record_id": "flaws_cloudtrail:0000018:447eac13-32d0-45f6-967b-859eb8b5c830", "row_index": 18, "timestamp": "2018-07-29T15:28:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "447eac13-32d0-45f6-967b-859eb8b5c830", "eventTime": "2018-07-29T15:28:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7adecd2c-3ca3-411f-8fae-4d067198f1c2", "record_id": "flaws_cloudtrail:0000019:7adecd2c-3ca3-411f-8fae-4d067198f1c2", "row_index": 19, "timestamp": "2018-07-29T15:28:33Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7adecd2c-3ca3-411f-8fae-4d067198f1c2", "eventTime": "2018-07-29T15:28:33Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3c5c0b7-5cfe-4448-ac3b-4d4558c77bf6", "record_id": "flaws_cloudtrail:0000020:c3c5c0b7-5cfe-4448-ac3b-4d4558c77bf6", "row_index": 20, "timestamp": "2018-07-29T15:28:33Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3c5c0b7-5cfe-4448-ac3b-4d4558c77bf6", "eventTime": "2018-07-29T15:28:33Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e5e176d-9693-4fcf-a9b1-10fbed29b0d7", "record_id": "flaws_cloudtrail:0000021:1e5e176d-9693-4fcf-a9b1-10fbed29b0d7", "row_index": 21, "timestamp": "2018-07-29T15:28:33Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e5e176d-9693-4fcf-a9b1-10fbed29b0d7", "eventTime": "2018-07-29T15:28:33Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb2abe9-9915-4fae-b2c8-3b80c0cfb3d9", "record_id": "flaws_cloudtrail:0000022:5bb2abe9-9915-4fae-b2c8-3b80c0cfb3d9", "row_index": 22, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb2abe9-9915-4fae-b2c8-3b80c0cfb3d9", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "105a7f48-3365-45d0-b21e-450d1eae0fb5", "record_id": "flaws_cloudtrail:0000023:105a7f48-3365-45d0-b21e-450d1eae0fb5", "row_index": 23, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "105a7f48-3365-45d0-b21e-450d1eae0fb5", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "644a114c-3a33-4172-8a65-28eae6cbe67f", "record_id": "flaws_cloudtrail:0000024:644a114c-3a33-4172-8a65-28eae6cbe67f", "row_index": 24, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "644a114c-3a33-4172-8a65-28eae6cbe67f", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c65478-d811-45c8-a98d-38dcec7595fa", "record_id": "flaws_cloudtrail:0000025:9c65478-d811-45c8-a98d-38dcec7595fa", "row_index": 25, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c65478-d811-45c8-a98d-38dcec7595fa", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcb6e87e-ec43-4068-b22d-d7a3aea0bbd1", "record_id": "flaws_cloudtrail:0000026:fcb6e87e-ec43-4068-b22d-d7a3aea0bbd1", "row_index": 26, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcb6e87e-ec43-4068-b22d-d7a3aea0bbd1", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0238b346-9a1d-42f9-b450-f648491d7d6a4", "record_id": "flaws_cloudtrail:0000027:0238b346-9a1d-42f9-b450-f648491d7d6a4", "row_index": 27, "timestamp": "2018-07-29T15:28:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0238b346-9a1d-42f9-b450-f648491d7d6a4", "eventTime": "2018-07-29T15:28:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c895965-21d1-4fdd-a096-3eee3d0082d5", "record_id": "flaws_cloudtrail:0000028:8c895965-21d1-4fdd-a096-3eee3d0082d5", "row_index": 28, "timestamp": "2018-07-29T15:28:35Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c895965-21d1-4fdd-a096-3eee3d0082d5", "eventTime": "2018-07-29T15:28:35Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abaf880f-a832-45f5-9a60-cf492de59134", "record_id": "flaws_cloudtrail:0000029:abaf880f-a832-45f5-9a60-cf492de59134", "row_index": 29, "timestamp": "2018-07-29T15:28:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 638, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abaf880f-a832-45f5-9a60-cf492de59134", "eventTime": "2018-07-29T15:28:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d821336f5-9b36-4e2f-b99a-8c97323caa64", "record_id": "flaws_cloudtrail:0000030:d821336f5-9b36-4e2f-b99a-8c97323caa64", "row_index": 30, "timestamp": "2018-07-29T15:28:49Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d821336f5-9b36-4e2f-b99a-8c97323caa64", "eventTime": "2018-07-29T15:28:49Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6bdb63-4b77-4826-98c0-55eba9d62bdb", "record_id": "flaws_cloudtrail:0000031:2e6bdb63-4b77-4826-98c0-55eba9d62bdb", "row_index": 31, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6bdb63-4b77-4826-98c0-55eba9d62bdb", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a2b4a20-729b-4091-9c8d-330c40d4ea31", "record_id": "flaws_cloudtrail:0000032:6a2b4a20-729b-4091-9c8d-330c40d4ea31", "row_index": 32, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a2b4a20-729b-4091-9c8d-330c40d4ea31", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e43aa3d-e546-481e-a1c9-2cae1f5e9e3b", "record_id": "flaws_cloudtrail:0000033:7e43aa3d-e546-481e-a1c9-2cae1f5e9e3b", "row_index": 33, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e43aa3d-e546-481e-a1c9-2cae1f5e9e3b", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643529-089d-47f9-8a43-451664c9dbe", "record_id": "flaws_cloudtrail:0000034:643529-089d-47f9-8a43-451664c9dbe", "row_index": 34, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643529-089d-47f9-8a43-451664c9dbe", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d20edc-8a98-4e11-98d9-aad9dbbbf436", "record_id": "flaws_cloudtrail:0000035:a0d20edc-8a98-4e11-98d9-aad9dbbbf436", "row_index": 35, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d20edc-8a98-4e11-98d9-aad9dbbbf436", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ec15b6-90a8-4c20-be6b-76858ed88fd5", "record_id": "flaws_cloudtrail:0000036:04ec15b6-90a8-4c20-be6b-76858ed88fd5", "row_index": 36, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ec15b6-90a8-4c20-be6b-76858ed88fd5", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c307585aa-1016-48cb-b392-7e41c21352e", "record_id": "flaws_cloudtrail:0000037:c307585aa-1016-48cb-b392-7e41c21352e", "row_index": 37, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c307585aa-1016-48cb-b392-7e41c21352e", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9431de97-57f2-4c88-9690-7f7754b9d4f4", "record_id": "flaws_cloudtrail:0000038:9431de97-57f2-4c88-9690-7f7754b9d4f4", "row_index": 38, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9431de97-57f2-4c88-9690-7f7754b9d4f4", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76babd34-3279-4640-8059-93e0d8b3e6ef", "record_id": "flaws_cloudtrail:0000039:76babd34-3279-4640-8059-93e0d8b3e6ef", "row_index": 39, "timestamp": "2018-07-29T15:28:50Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76babd34-3279-4640-8059-93e0d8b3e6ef", "eventTime": "2018-07-29T15:28:50Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "819ea28e-4bfe-4063-9282-36facba0e58a", "record_id": "flaws_cloudtrail:0000040:819ea28e-4bfe-4063-9282-36facba0e58a", "row_index": 40, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "819ea28e-4bfe-4063-9282-36facba0e58a", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a8d05a9-ca3e-47e4-b091-b352750f4c33f", "record_id": "flaws_cloudtrail:0000041:1a8d05a9-ca3e-47e4-b091-b352750f4c33f", "row_index": 41, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a8d05a9-ca3e-47e4-b091-b352750f4c33f", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9c01ea-485f-4088-9f15-5437b2ded9ee", "record_id": "flaws_cloudtrail:0000042:3c9c01ea-485f-4088-9f15-5437b2ded9ee", "row_index": 42, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9c01ea-485f-4088-9f15-5437b2ded9ee", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7bc9a78-7999-4329-bc32-975f83bd6594", "record_id": "flaws_cloudtrail:0000043:e7bc9a78-7999-4329-bc32-975f83bd6594", "row_index": 43, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7bc9a78-7999-4329-bc32-975f83bd6594", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0317ee06-5e8c-4bcc-9fdc-33fe31402f53", "record_id": "flaws_cloudtrail:0000044:0317ee06-5e8c-4bcc-9fdc-33fe31402f53", "row_index": 44, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0317ee06-5e8c-4bcc-9fdc-33fe31402f53", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78941bdd-7779-47c2-8a7b-3697d2ee254e", "record_id": "flaws_cloudtrail:0000045:78941bdd-7779-47c2-8a7b-3697d2ee254e", "row_index": 45, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78941bdd-7779-47c2-8a7b-3697d2ee254e", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "850f3cdf-7f09-45b2-94db-9139b4319438", "record_id": "flaws_cloudtrail:0000046:850f3cdf-7f09-45b2-94db-9139b4319438", "row_index": 46, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "850f3cdf-7f09-45b2-94db-9139b4319438", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213cf5e3-3396-4207-80ab-08423b02d05c", "record_id": "flaws_cloudtrail:0000047:213cf5e3-3396-4207-80ab-08423b02d05c", "row_index": 47, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213cf5e3-3396-4207-80ab-08423b02d05c", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805956d0-4284-4616-80e0-d7f11850", "record_id": "flaws_cloudtrail:0000048:805956d0-4284-4616-80e0-d7f11850", "row_index": 48, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805956d0-4284-4616-80e0-d7f11850", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35228e-fedc-4c2d-878a-baa8422f68d1", "record_id": "flaws_cloudtrail:0000049:35228e-fedc-4c2d-878a-baa8422f68d1", "row_index": 49, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35228e-fedc-4c2d-878a-baa8422f68d1", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d26f18-ecdb-47a1-af7f-23f924bb98c8", "record_id": "flaws_cloudtrail:0000050:d7d26f18-ecdb-47a1-af7f-23f924bb98c8", "row_index": 50, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d26f18-ecdb-47a1-af7f-23f924bb98c8", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf143a10-aa7f-46ea-87d9-7940b67abe8d", "record_id": "flaws_cloudtrail:0000051:bf143a10-aa7f-46ea-87d9-7940b67abe8d", "row_index": 51, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf143a10-aa7f-46ea-87d9-7940b67abe8d", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d22b8a-b05b-49df-a97d-f6bc0bfdc031", "record_id": "flaws_cloudtrail:0000052:c6d22b8a-b05b-49df-a97d-f6bc0bfdc031", "row_index": 52, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d22b8a-b05b-49df-a97d-f6bc0bfdc031", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236ce13b-7806-48e8-972f-bd1adde2677c", "record_id": "flaws_cloudtrail:0000053:236ce13b-7806-48e8-972f-bd1adde2677c", "row_index": 53, "timestamp": "2018-07-29T15:28:51Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236ce13b-7806-48e8-972f-bd1adde2677c", "eventTime": "2018-07-29T15:28:51Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56bfd6f6-49a3-4ec7-a12c-fb7ff3f81b49", "record_id": "flaws_cloudtrail:0000054:56bfd6f6-49a3-4ec7-a12c-fb7ff3f81b49", "row_index": 54, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56bfd6f6-49a3-4ec7-a12c-fb7ff3f81b49", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e76921b-4277-4b6d-84b0-ece7ca203825e", "record_id": "flaws_cloudtrail:0000055:3e76921b-4277-4b6d-84b0-ece7ca203825e", "row_index": 55, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e76921b-4277-4b6d-84b0-ece7ca203825e", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442a42ef-1e5e-4222-ab8c-02961eeab0f4", "record_id": "flaws_cloudtrail:0000056:442a42ef-1e5e-4222-ab8c-02961eeab0f4", "row_index": 56, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442a42ef-1e5e-4222-ab8c-02961eeab0f4", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b8968b-aca7-4f75-ad6e-8709e4930b55", "record_id": "flaws_cloudtrail:0000057:59b8968b-aca7-4f75-ad6e-8709e4930b55", "row_index": 57, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b8968b-aca7-4f75-ad6e-8709e4930b55", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa71ddb-1a7b-4d16-8972-5ea44ab3eba4", "record_id": "flaws_cloudtrail:0000058:daa71ddb-1a7b-4d16-8972-5ea44ab3eba4", "row_index": 58, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa71ddb-1a7b-4d16-8972-5ea44ab3eba4", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8600b80c-eab2-4c48-b7f4-5f5831a13e28", "record_id": "flaws_cloudtrail:0000059:8600b80c-eab2-4c48-b7f4-5f5831a13e28", "row_index": 59, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8600b80c-eab2-4c48-b7f4-5f5831a13e28", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa545cdd-2f7f-4909-8940-16487a701b54", "record_id": "flaws_cloudtrail:0000060:aa545cdd-2f7f-4909-8940-16487a701b54", "row_index": 60, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa545cdd-2f7f-4909-8940-16487a701b54", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96e8bf37-939c-45fa-8f00-7b7e3e12983d", "record_id": "flaws_cloudtrail:0000061:96e8bf37-939c-45fa-8f00-7b7e3e12983d", "row_index": 61, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96e8bf37-939c-45fa-8f00-7b7e3e12983d", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecd4d64c-2f31-4ba5-a0fd-da095c72795a", "record_id": "flaws_cloudtrail:0000062:ecd4d64c-2f31-4ba5-a0fd-da095c72795a", "row_index": 62, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecd4d64c-2f31-4ba5-a0fd-da095c72795a", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b76cc4f-2cae-44d5-b42f-7ab739012e50", "record_id": "flaws_cloudtrail:0000063:0b76cc4f-2cae-44d5-b42f-7ab739012e50", "row_index": 63, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b76cc4f-2cae-44d5-b42f-7ab739012e50", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f794633c-6e3a-4670-b840-6fb0ba206604", "record_id": "flaws_cloudtrail:0000064:7f794633c-6e3a-4670-b840-6fb0ba206604", "row_index": 64, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f794633c-6e3a-4670-b840-6fb0ba206604", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "970b9113-5fb7-4f5b-896c-a648f7fca402", "record_id": "flaws_cloudtrail:0000065:970b9113-5fb7-4f5b-896c-a648f7fca402", "row_index": 65, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "970b9113-5fb7-4f5b-896c-a648f7fca402", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d691f42c-9f5f-4d64-8114-ec7df48e0086", "record_id": "flaws_cloudtrail:0000066:d691f42c-9f5f-4d64-8114-ec7df48e0086", "row_index": 66, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d691f42c-9f5f-4d64-8114-ec7df48e0086", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef4acb4e-f200-4e89-8c42-b6e0499a89e7", "record_id": "flaws_cloudtrail:0000067:ef4acb4e-f200-4e89-8c42-b6e0499a89e7", "row_index": 67, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef4acb4e-f200-4e89-8c42-b6e0499a89e7", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2f5b85b-12b0-4ec1-8438-df26efb2b90d", "record_id": "flaws_cloudtrail:0000068:f2f5b85b-12b0-4ec1-8438-df26efb2b90d", "row_index": 68, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2f5b85b-12b0-4ec1-8438-df26efb2b90d", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50626-77ac-407b-ad21-a6c32cacf347", "record_id": "flaws_cloudtrail:0000069:50626-77ac-407b-ad21-a6c32cacf347", "row_index": 69, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50626-77ac-407b-ad21-a6c32cacf347", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba4859d-8399-4940-8670-8dedee713973b", "record_id": "flaws_cloudtrail:0000070:6ba4859d-8399-4940-8670-8dedee713973b", "row_index": 70, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba4859d-8399-4940-8670-8dedee713973b", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567e496f-3485-4d50-9cbd-266b0ae7ff86", "record_id": "flaws_cloudtrail:0000071:567e496f-3485-4d50-9cbd-266b0ae7ff86", "row_index": 71, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567e496f-3485-4d50-9cbd-266b0ae7ff86", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d83a0279-d5e6-4806-ba66-f7f32698", "record_id": "flaws_cloudtrail:0000072:d83a0279-d5e6-4806-ba66-f7f32698", "row_index": 72, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d83a0279-d5e6-4806-ba66-f7f32698", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4f946be-faaa-4476-8014-ccea340ed63e", "record_id": "flaws_cloudtrail:0000073:a4f946be-faaa-4476-8014-ccea340ed63e", "row_index": 73, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4f946be-faaa-4476-8014-ccea340ed63e", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c755100-7ee3-4fcd-b924-42b3d7673d27", "record_id": "flaws_cloudtrail:0000074:1c755100-7ee3-4fcd-b924-42b3d7673d27", "row_index": 74, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c755100-7ee3-4fcd-b924-42b3d7673d27", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b695809ac-177b-4329-a436-ee84a89757b", "record_id": "flaws_cloudtrail:0000075:b695809ac-177b-4329-a436-ee84a89757b", "row_index": 75, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b695809ac-177b-4329-a436-ee84a89757b", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c14989f3-a091-4100-b843-fa922abcff42", "record_id": "flaws_cloudtrail:0000076:c14989f3-a091-4100-b843-fa922abcff42", "row_index": 76, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c14989f3-a091-4100-b843-fa922abcff42", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0ed8c81-82c0-4a38-b0e2-7c0de975d196", "record_id": "flaws_cloudtrail:0000077:b0ed8c81-82c0-4a38-b0e2-7c0de975d196", "row_index": 77, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0ed8c81-82c0-4a38-b0e2-7c0de975d196", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "149466aa7-4698-404f-abe4-f6b8b2b1470e", "record_id": "flaws_cloudtrail:0000078:149466aa7-4698-404f-abe4-f6b8b2b1470e", "row_index": 78, "timestamp": "2018-07-29T15:28:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "149466aa7-4698-404f-abe4-f6b8b2b1470e", "eventTime": "2018-07-29T15:28:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c3449b0-f63a-4121-b6f6-a27b7cb74d71", "record_id": "flaws_cloudtrail:0000079:2c3449b0-f63a-4121-b6f6-a27b7cb74d71", "row_index": 79, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c3449b0-f63a-4121-b6f6-a27b7cb74d71", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af3a9435-936a-4524-8b61-0855fef32c20", "record_id": "flaws_cloudtrail:0000080:af3a9435-936a-4524-8b61-0855fef32c20", "row_index": 80, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af3a9435-936a-4524-8b61-0855fef32c20", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614f245e-834d-466b-a42e-378b5381dc6b", "record_id": "flaws_cloudtrail:0000081:614f245e-834d-466b-a42e-378b5381dc6b", "row_index": 81, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614f245e-834d-466b-a42e-378b5381dc6b", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e99c0020-3714-40cd-8069-4e82da3fcb0e", "record_id": "flaws_cloudtrail:0000082:e99c0020-3714-40cd-8069-4e82da3fcb0e", "row_index": 82, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e99c0020-3714-40cd-8069-4e82da3fcb0e", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a13de8e-4caf-423e-84fc-9b84ed7f2df1", "record_id": "flaws_cloudtrail:0000083:8a13de8e-4caf-423e-84fc-9b84ed7f2df1", "row_index": 83, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a13de8e-4caf-423e-84fc-9b84ed7f2df1", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24287f8d-1d0f-4500-957b-c4a7f35cb4bd", "record_id": "flaws_cloudtrail:0000084:24287f8d-1d0f-4500-957b-c4a7f35cb4bd", "row_index": 84, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24287f8d-1d0f-4500-957b-c4a7f35cb4bd", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de88156f-d120-4330-91e0-aee095303ab62", "record_id": "flaws_cloudtrail:0000085:de88156f-d120-4330-91e0-aee095303ab62", "row_index": 85, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de88156f-d120-4330-91e0-aee095303ab62", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "971118c42-d004-422f-8f5e-701170320699", "record_id": "flaws_cloudtrail:0000086:971118c42-d004-422f-8f5e-701170320699", "row_index": 86, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "971118c42-d004-422f-8f5e-701170320699", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "877f3a0d-cf26-4309-b8a2-336b3d3c37b0", "record_id": "flaws_cloudtrail:0000087:877f3a0d-cf26-4309-b8a2-336b3d3c37b0", "row_index": 87, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "877f3a0d-cf26-4309-b8a2-336b3d3c37b0", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1daa7770-de0e-4f6b-a3a4-d7887d86b401", "record_id": "flaws_cloudtrail:0000088:1daa7770-de0e-4f6b-a3a4-d7887d86b401", "row_index": 88, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1daa7770-de0e-4f6b-a3a4-d7887d86b401", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d4000f-6cbf-4ada-a134-1325c239539d5", "record_id": "flaws_cloudtrail:0000089:c7d4000f-6cbf-4ada-a134-1325c239539d5", "row_index": 89, "timestamp": "2018-07-29T15:28:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d4000f-6cbf-4ada-a134-1325c239539d5", "eventTime": "2018-07-29T15:28:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "[Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7831b990-3839-452c-9be8-fdb8a30ae9e8", "record_id": "flaws_cloudtrail:0000090:7831b990-3839-452c-9be8-fdb8a30ae9e8", "row_index": 90, "timestamp": "2018-07-29T15:28:56Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7831b990-3839-452c-9be8-fdb8a30ae9e8", "eventTime": "2018-07-29T15:28:56Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50a5a9e4-aa57-4e23-8d4f-6531e0853e6e", "record_id": "flaws_cloudtrail:0000091:50a5a9e4-aa57-4e23-8d4f-6531e0853e6e", "row_index": 91, "timestamp": "2018-07-29T15:28:56Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50a5a9e4-aa57-4e23-8d4f-6531e0853e6e", "eventTime": "2018-07-29T15:28:56Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18c8b112-0fdf-4d62-843f-f79b7244f1c1", "record_id": "flaws_cloudtrail:0000092:18c8b112-0fdf-4d62-843f-f79b7244f1c1", "row_index": 92, "timestamp": "2018-07-29T15:28:56Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18c8b112-0fdf-4d62-843f-f79b7244f1c1", "eventTime": "2018-07-29T15:28:56Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d914136-5cbe-400e-b4e3-85916b70d7ec", "record_id": "flaws_cloudtrail:0000093:d7d914136-5cbe-400e-b4e3-85916b70d7ec", "row_index": 93, "timestamp": "2018-07-29T15:28:56Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d914136-5cbe-400e-b4e3-85916b70d7ec", "eventTime": "2018-07-29T15:28:56Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e7e394b-df36-4d7b-83e0-6a948031e", "record_id": "flaws_cloudtrail:0000094:0e7e394b-df36-4d7b-83e0-6a948031e", "row_index": 94, "timestamp": "2018-07-29T15:28:57Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e7e394b-df36-4d7b-83e0-6a948031e", "eventTime": "2018-07-29T15:28:57Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e055e1dc-dddb-427b-ac54-f1f4fa5ef58a", "record_id": "flaws_cloudtrail:0000095:e055e1dc-dddb-427b-ac54-f1f4fa5ef58a", "row_index": 95, "timestamp": "2018-07-29T15:28:57Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e055e1dc-dddb-427b-ac54-f1f4fa5ef58a", "eventTime": "2018-07-29T15:28:57Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c122334b1-2528-4c04-90cb-f8e5ba9dd050", "record_id": "flaws_cloudtrail:0000096:c122334b1-2528-4c04-90cb-f8e5ba9dd050", "row_index": 96, "timestamp": "2018-07-29T15:28:57Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c122334b1-2528-4c04-90cb-f8e5ba9dd050", "eventTime": "2018-07-29T15:28:57Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39a118b8-8bee-4ab1-8c9d-07b73e84a800", "record_id": "flaws_cloudtrail:0000097:39a118b8-8bee-4ab1-8c9d-07b73e84a800", "row_index": 97, "timestamp": "2018-07-29T15:28:57Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39a118b8-8bee-4ab1-8c9d-07b73e84a800", "eventTime": "2018-07-29T15:28:57Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9066aab-caf2-44f8-afa1-18d7ea3fbdda", "record_id": "flaws_cloudtrail:0000098:e9066aab-caf2-44f8-afa1-18d7ea3fbdda", "row_index": 98, "timestamp": "2018-07-29T15:28:58Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9066aab-caf2-44f8-afa1-18d7ea3fbdda", "eventTime": "2018-07-29T15:28:58Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162c04ef-5777-4392-a636-44a0362f3768", "record_id": "flaws_cloudtrail:0000099:162c04ef-5777-4392-a636-44a0362f3768", "row_index": 99, "timestamp": "2018-07-29T15:28:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162c04ef-5777-4392-a636-44a0362f3768", "eventTime": "2018-07-29T15:28:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82fe74d7-0b3c-4d0a-81eb-214ec34426f6", "record_id": "flaws_cloudtrail:0000100:82fe74d7-0b3c-4d0a-81eb-214ec34426f6", "row_index": 100, "timestamp": "2018-07-29T15:28:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82fe74d7-0b3c-4d0a-81eb-214ec34426f6", "eventTime": "2018-07-29T15:28:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bbd787d-1564-48e1-b9b1-0c6dfa690704c", "record_id": "flaws_cloudtrail:0000101:2bbd787d-1564-48e1-b9b1-0c6dfa690704c", "row_index": 101, "timestamp": "2018-07-29T15:28:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bbd787d-1564-48e1-b9b1-0c6dfa690704c", "eventTime": "2018-07-29T15:28:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41ce685e-ddcd-4e0b-b568-347fe24a6fb2", "record_id": "flaws_cloudtrail:0000102:41ce685e-ddcd-4e0b-b568-347fe24a6fb2", "row_index": 102, "timestamp": "2018-07-29T15:28:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41ce685e-ddcd-4e0b-b568-347fe24a6fb2", "eventTime": "2018-07-29T15:28:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a9728d-0c91-4f18-98f5-9be5b952403f", "record_id": "flaws_cloudtrail:0000103:19a9728d-0c91-4f18-98f5-9be5b952403f", "row_index": 103, "timestamp": "2018-07-29T15:28:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a9728d-0c91-4f18-98f5-9be5b952403f", "eventTime": "2018-07-29T15:28:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23396ccf-d7ba-46f1-92fa-73c1c800e4ed", "record_id": "flaws_cloudtrail:0000104:23396ccf-d7ba-46f1-92fa-73c1c800e4ed", "row_index": 104, "timestamp": "2018-07-29T15:29:00Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23396ccf-d7ba-46f1-92fa-73c1c800e4ed", "eventTime": "2018-07-29T15:29:00Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69eb2827-4c87-4778-87ee-c0fe144628bb", "record_id": "flaws_cloudtrail:0000105:69eb2827-4c87-4778-87ee-c0fe144628bb", "row_index": 105, "timestamp": "2018-07-29T15:29:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69eb2827-4c87-4778-87ee-c0fe144628bb", "eventTime": "2018-07-29T15:29:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c2914d-42e1-48f3-881d-5e51f0993a7c", "record_id": "flaws_cloudtrail:0000106:90c2914d-42e1-48f3-881d-5e51f0993a7c", "row_index": 106, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c2914d-42e1-48f3-881d-5e51f0993a7c", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1caa40f4-0d71-4371-9b95-e5d646439c4", "record_id": "flaws_cloudtrail:0000107:1caa40f4-0d71-4371-9b95-e5d646439c4", "row_index": 107, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1caa40f4-0d71-4371-9b95-e5d646439c4", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "908237ee-cfce-4f9a-8924-fd6cea8339e8", "record_id": "flaws_cloudtrail:0000108:908237ee-cfce-4f9a-8924-fd6cea8339e8", "row_index": 108, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "908237ee-cfce-4f9a-8924-fd6cea8339e8", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b890f92-082d-485e-9018-5e37874e62d4", "record_id": "flaws_cloudtrail:0000109:8b890f92-082d-485e-9018-5e37874e62d4", "row_index": 109, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b890f92-082d-485e-9018-5e37874e62d4", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78173-e4e3-460f-a1f0-d8e4998eff24", "record_id": "flaws_cloudtrail:0000110:78173-e4e3-460f-a1f0-d8e4998eff24", "row_index": 110, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78173-e4e3-460f-a1f0-d8e4998eff24", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ea6122a-105f-4674-9ca6-a46468d8113", "record_id": "flaws_cloudtrail:0000111:7ea6122a-105f-4674-9ca6-a46468d8113", "row_index": 111, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ea6122a-105f-4674-9ca6-a46468d8113", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21b579a4-790f-4eb6-8fe2-e81bb5ebdf9b", "record_id": "flaws_cloudtrail:0000112:21b579a4-790f-4eb6-8fe2-e81bb5ebdf9b", "row_index": 112, "timestamp": "2018-07-29T15:29:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21b579a4-790f-4eb6-8fe2-e81bb5ebdf9b", "eventTime": "2018-07-29T15:29:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2110efbe-9e2d-4af0-ba3d-279690211739", "record_id": "flaws_cloudtrail:0000113:2110efbe-9e2d-4af0-ba3d-279690211739", "row_index": 113, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2110efbe-9e2d-4af0-ba3d-279690211739", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "167ec590-8a90-4c54-8e98-acdaab82bc14", "record_id": "flaws_cloudtrail:0000114:167ec590-8a90-4c54-8e98-acdaab82bc14", "row_index": 114, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "167ec590-8a90-4c54-8e98-acdaab82bc14", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50a50b2d-2e3e-4591-b535-5e64d7e0be21", "record_id": "flaws_cloudtrail:0000115:50a50b2d-2e3e-4591-b535-5e64d7e0be21", "row_index": 115, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50a50b2d-2e3e-4591-b535-5e64d7e0be21", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55092-e837-4b26-8b1f-04eb76ea3eb8", "record_id": "flaws_cloudtrail:0000116:55092-e837-4b26-8b1f-04eb76ea3eb8", "row_index": 116, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55092-e837-4b26-8b1f-04eb76ea3eb8", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d582004-392a-459d-a372-91c7e8e16ef3", "record_id": "flaws_cloudtrail:0000117:d582004-392a-459d-a372-91c7e8e16ef3", "row_index": 117, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d582004-392a-459d-a372-91c7e8e16ef3", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54e571f1-9bd6-43b8-bea9-9980b4e0bec0", "record_id": "flaws_cloudtrail:0000118:54e571f1-9bd6-43b8-bea9-9980b4e0bec0", "row_index": 118, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54e571f1-9bd6-43b8-bea9-9980b4e0bec0", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e1818d4-4faf-4028-a6dc-8f259ecbc32f", "record_id": "flaws_cloudtrail:0000119:8e1818d4-4faf-4028-a6dc-8f259ecbc32f", "row_index": 119, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e1818d4-4faf-4028-a6dc-8f259ecbc32f", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f438e4-ce20-43a0-9f7e-fc1ae1f140af", "record_id": "flaws_cloudtrail:0000120:95f438e4-ce20-43a0-9f7e-fc1ae1f140af", "row_index": 120, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f438e4-ce20-43a0-9f7e-fc1ae1f140af", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8a5cd27-15d3-41dd-8c79-897995ba2ded", "record_id": "flaws_cloudtrail:0000121:b8a5cd27-15d3-41dd-8c79-897995ba2ded", "row_index": 121, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8a5cd27-15d3-41dd-8c79-897995ba2ded", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76b7f1d4-b61d-46fc-bded-f70118e3534d", "record_id": "flaws_cloudtrail:0000122:76b7f1d4-b61d-46fc-bded-f70118e3534d", "row_index": 122, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76b7f1d4-b61d-46fc-bded-f70118e3534d", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7324f747-307e-466a-ac2e-a62e97c41019", "record_id": "flaws_cloudtrail:0000123:7324f747-307e-466a-ac2e-a62e97c41019", "row_index": 123, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7324f747-307e-466a-ac2e-a62e97c41019", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28af01b4-808b-49e5-9c33-c20a59cf53be", "record_id": "flaws_cloudtrail:0000124:28af01b4-808b-49e5-9c33-c20a59cf53be", "row_index": 124, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28af01b4-808b-49e5-9c33-c20a59cf53be", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abad9348-4522-423f-9627-6a43952f9eb", "record_id": "flaws_cloudtrail:0000125:abad9348-4522-423f-9627-6a43952f9eb", "row_index": 125, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abad9348-4522-423f-9627-6a43952f9eb", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b1bf2cd-3dca-426a-907d-3a2c6717456e", "record_id": "flaws_cloudtrail:0000126:6b1bf2cd-3dca-426a-907d-3a2c6717456e", "row_index": 126, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b1bf2cd-3dca-426a-907d-3a2c6717456e", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84d8a7a9-6939-4a05-9286-d372edb94148", "record_id": "flaws_cloudtrail:0000127:84d8a7a9-6939-4a05-9286-d372edb94148", "row_index": 127, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84d8a7a9-6939-4a05-9286-d372edb94148", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5465e982-d01a-4141-88ff-8aa708d0b7bd", "record_id": "flaws_cloudtrail:0000128:5465e982-d01a-4141-88ff-8aa708d0b7bd", "row_index": 128, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5465e982-d01a-4141-88ff-8aa708d0b7bd", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6511c59f-1f7d-40d3-a3ee-81a9151cee7f", "record_id": "flaws_cloudtrail:0000129:6511c59f-1f7d-40d3-a3ee-81a9151cee7f", "row_index": 129, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6511c59f-1f7d-40d3-a3ee-81a9151cee7f", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a4f06ca-2dc4-4e6d-93dc-50588e3bbe9a", "record_id": "flaws_cloudtrail:0000130:1a4f06ca-2dc4-4e6d-93dc-50588e3bbe9a", "row_index": 130, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a4f06ca-2dc4-4e6d-93dc-50588e3bbe9a", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cf0c6d-8945-4860-bdaa-117f3a96558f", "record_id": "flaws_cloudtrail:0000131:e2cf0c6d-8945-4860-bdaa-117f3a96558f", "row_index": 131, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cf0c6d-8945-4860-bdaa-117f3a96558f", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241556b93-4bb9-47c7-8b8d-d565bb25aeb9", "record_id": "flaws_cloudtrail:0000132:241556b93-4bb9-47c7-8b8d-d565bb25aeb9", "row_index": 132, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241556b93-4bb9-47c7-8b8d-d565bb25aeb9", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e605eda-7088-42b0-8eed-d63cb77ae229", "record_id": "flaws_cloudtrail:0000133:8e605eda-7088-42b0-8eed-d63cb77ae229", "row_index": 133, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e605eda-7088-42b0-8eed-d63cb77ae229", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa22cb43-ae53-4927-a651-19468b575c8", "record_id": "flaws_cloudtrail:0000134:fa22cb43-ae53-4927-a651-19468b575c8", "row_index": 134, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa22cb43-ae53-4927-a651-19468b575c8", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "518dc57b-611e-4637-8ae3-a4c3c1fbe6bb", "record_id": "flaws_cloudtrail:0000135:518dc57b-611e-4637-8ae3-a4c3c1fbe6bb", "row_index": 135, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "518dc57b-611e-4637-8ae3-a4c3c1fbe6bb", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2a740139-c0f1-4204-a94b-dbe7e15b6d84", "record_id": "flaws_cloudtrail:0000136:c2a740139-c0f1-4204-a94b-dbe7e15b6d84", "row_index": 136, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2a740139-c0f1-4204-a94b-dbe7e15b6d84", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c205cf0-cd98-4c3f-85a4-bd1c7d1550c4", "record_id": "flaws_cloudtrail:0000137:7c205cf0-cd98-4c3f-85a4-bd1c7d1550c4", "row_index": 137, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c205cf0-cd98-4c3f-85a4-bd1c7d1550c4", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1afddb17-1bef-427d-bf58-b9a89bf6fd6f", "record_id": "flaws_cloudtrail:0000138:1afddb17-1bef-427d-bf58-b9a89bf6fd6f", "row_index": 138, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1afddb17-1bef-427d-bf58-b9a89bf6fd6f", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318f7879-bfab-40b3-86e4-900c361816d", "record_id": "flaws_cloudtrail:0000139:318f7879-bfab-40b3-86e4-900c361816d", "row_index": 139, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318f7879-bfab-40b3-86e4-900c361816d", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d87b8a9-630d-4737-b6c1-5469ca4ca7ea", "record_id": "flaws_cloudtrail:0000140:3d87b8a9-630d-4737-b6c1-5469ca4ca7ea", "row_index": 140, "timestamp": "2018-07-29T15:29:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d87b8a9-630d-4737-b6c1-5469ca4ca7ea", "eventTime": "2018-07-29T15:29:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acaee218-0141-46e8-aac2-3a61e2852ac5", "record_id": "flaws_cloudtrail:0000141:acaee218-0141-46e8-aac2-3a61e2852ac5", "row_index": 141, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acaee218-0141-46e8-aac2-3a61e2852ac5", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54e140460-cd5f-4e24-a867-528f8b44ad0d", "record_id": "flaws_cloudtrail:0000142:54e140460-cd5f-4e24-a867-528f8b44ad0d", "row_index": 142, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54e140460-cd5f-4e24-a867-528f8b44ad0d", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da91ac8-3be3-4fe2-af3f-2c923a5d482e", "record_id": "flaws_cloudtrail:0000143:2da91ac8-3be3-4fe2-af3f-2c923a5d482e", "row_index": 143, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da91ac8-3be3-4fe2-af3f-2c923a5d482e", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e018cde-abd7-4a0d-b494-21c1cfd17b56", "record_id": "flaws_cloudtrail:0000144:1e018cde-abd7-4a0d-b494-21c1cfd17b56", "row_index": 144, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e018cde-abd7-4a0d-b494-21c1cfd17b56", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "886183fc-4e08-4346-adaa-f69b8e501f1f", "record_id": "flaws_cloudtrail:0000145:886183fc-4e08-4346-adaa-f69b8e501f1f", "row_index": 145, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "886183fc-4e08-4346-adaa-f69b8e501f1f", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8a0a87d-5a7a-4343-bb4e-578afff71f03", "record_id": "flaws_cloudtrail:0000146:b8a0a87d-5a7a-4343-bb4e-578afff71f03", "row_index": 146, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8a0a87d-5a7a-4343-bb4e-578afff71f03", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "470051d5d-0f0b-4e5f-b189-36b55d462252e", "record_id": "flaws_cloudtrail:0000147:470051d5d-0f0b-4e5f-b189-36b55d462252e", "row_index": 147, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "470051d5d-0f0b-4e5f-b189-36b55d462252e", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba9ebc54-3d76-40ff-90b2-b0741cd9b800", "record_id": "flaws_cloudtrail:0000148:ba9ebc54-3d76-40ff-90b2-b0741cd9b800", "row_index": 148, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba9ebc54-3d76-40ff-90b2-b0741cd9b800", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db1f11c7-7701-4b2b-9f45-3adaa830a6a0", "record_id": "flaws_cloudtrail:0000149:db1f11c7-7701-4b2b-9f45-3adaa830a6a0", "row_index": 149, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db1f11c7-7701-4b2b-9f45-3adaa830a6a0", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e246f45-5634-4b16-9648-09fe66dd2871", "record_id": "flaws_cloudtrail:0000150:1e246f45-5634-4b16-9648-09fe66dd2871", "row_index": 150, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e246f45-5634-4b16-9648-09fe66dd2871", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e654b0ac-5aa3-43f9-bb87-a8a108206cea1", "record_id": "flaws_cloudtrail:0000151:e654b0ac-5aa3-43f9-bb87-a8a108206cea1", "row_index": 151, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e654b0ac-5aa3-43f9-bb87-a8a108206cea1", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937620c-16ae-4818-92fd-530430b19a18", "record_id": "flaws_cloudtrail:0000152:937620c-16ae-4818-92fd-530430b19a18", "row_index": 152, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937620c-16ae-4818-92fd-530430b19a18", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "641722a-d077-467a-8ce2-6fd0a3fd2471", "record_id": "flaws_cloudtrail:0000153:641722a-d077-467a-8ce2-6fd0a3fd2471", "row_index": 153, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "641722a-d077-467a-8ce2-6fd0a3fd2471", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9422b4fb-4b9c-4524-b93c-d4684b5447ca", "record_id": "flaws_cloudtrail:0000154:9422b4fb-4b9c-4524-b93c-d4684b5447ca", "row_index": 154, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9422b4fb-4b9c-4524-b93c-d4684b5447ca", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01772f0-3a14-48fd-82c5-f443dea5921d", "record_id": "flaws_cloudtrail:0000155:d01772f0-3a14-48fd-82c5-f443dea5921d", "row_index": 155, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01772f0-3a14-48fd-82c5-f443dea5921d", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180e27d5-6f08-453e-a141-8720c33d32b0", "record_id": "flaws_cloudtrail:0000156:180e27d5-6f08-453e-a141-8720c33d32b0", "row_index": 156, "timestamp": "2018-07-29T15:29:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180e27d5-6f08-453e-a141-8720c33d32b0", "eventTime": "2018-07-29T15:29:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa5f175-f675-48c0-bb6d-faadea57cd7b", "record_id": "flaws_cloudtrail:0000157:faa5f175-f675-48c0-bb6d-faadea57cd7b", "row_index": 157, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa5f175-f675-48c0-bb6d-faadea57cd7b", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08895-0a60-47ac-b0da-b660f5dff2c8", "record_id": "flaws_cloudtrail:0000158:08895-0a60-47ac-b0da-b660f5dff2c8", "row_index": 158, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08895-0a60-47ac-b0da-b660f5dff2c8", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b56021-f01b-4b4b-8970-2e2ed860eca2", "record_id": "flaws_cloudtrail:0000159:b56021-f01b-4b4b-8970-2e2ed860eca2", "row_index": 159, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b56021-f01b-4b4b-8970-2e2ed860eca2", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c88684-4f75-49da-9f97-fe21d338588ab", "record_id": "flaws_cloudtrail:0000160:0c88684-4f75-49da-9f97-fe21d338588ab", "row_index": 160, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c88684-4f75-49da-9f97-fe21d338588ab", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097515c7-ecd3-41d5-8429-3fbd8055f5d6", "record_id": "flaws_cloudtrail:0000161:097515c7-ecd3-41d5-8429-3fbd8055f5d6", "row_index": 161, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097515c7-ecd3-41d5-8429-3fbd8055f5d6", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad98e1a-964d-4b8b-95c6-bbedd452b05f", "record_id": "flaws_cloudtrail:0000162:5ad98e1a-964d-4b8b-95c6-bbedd452b05f", "row_index": 162, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad98e1a-964d-4b8b-95c6-bbedd452b05f", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c620c770-1994-4659-9a78-7d407a9c3c0d", "record_id": "flaws_cloudtrail:0000163:c620c770-1994-4659-9a78-7d407a9c3c0d", "row_index": 163, "timestamp": "2018-07-29T15:29:16Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c620c770-1994-4659-9a78-7d407a9c3c0d", "eventTime": "2018-07-29T15:29:16Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cff3860-e74d-430c-b983-00d1535fc79a", "record_id": "flaws_cloudtrail:0000164:8cff3860-e74d-430c-b983-00d1535fc79a", "row_index": 164, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cff3860-e74d-430c-b983-00d1535fc79a", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a688fb4-b052-4a23-a2d6-40c94a406bd2", "record_id": "flaws_cloudtrail:0000165:4a688fb4-b052-4a23-a2d6-40c94a406bd2", "row_index": 165, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a688fb4-b052-4a23-a2d6-40c94a406bd2", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ac0222-9cfc-4532-a4f1-b6ad5dbf6108", "record_id": "flaws_cloudtrail:0000166:b4ac0222-9cfc-4532-a4f1-b6ad5dbf6108", "row_index": 166, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ac0222-9cfc-4532-a4f1-b6ad5dbf6108", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def59ad6-3b93-46eb-bfbc-3a0dd9ca3515", "record_id": "flaws_cloudtrail:0000167:def59ad6-3b93-46eb-bfbc-3a0dd9ca3515", "row_index": 167, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def59ad6-3b93-46eb-bfbc-3a0dd9ca3515", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea80857-2372-445d-b18d-759562b97df9", "record_id": "flaws_cloudtrail:0000168:2ea80857-2372-445d-b18d-759562b97df9", "row_index": 168, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea80857-2372-445d-b18d-759562b97df9", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1cfd13-386a-4005-b384-057bf7c31283", "record_id": "flaws_cloudtrail:0000169:3a1cfd13-386a-4005-b384-057bf7c31283", "row_index": 169, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1cfd13-386a-4005-b384-057bf7c31283", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6128cfae-6f39-4087-87e9-ee0743c110bb", "record_id": "flaws_cloudtrail:0000170:6128cfae-6f39-4087-87e9-ee0743c110bb", "row_index": 170, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6128cfae-6f39-4087-87e9-ee0743c110bb", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d463e2d-5b57-4f5d-91c2-52b1a19cbeff", "record_id": "flaws_cloudtrail:0000171:8d463e2d-5b57-4f5d-91c2-52b1a19cbeff", "row_index": 171, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d463e2d-5b57-4f5d-91c2-52b1a19cbeff", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084b9b70-6810-44fa-98d3-745b8bd658890", "record_id": "flaws_cloudtrail:0000172:084b9b70-6810-44fa-98d3-745b8bd658890", "row_index": 172, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084b9b70-6810-44fa-98d3-745b8bd658890", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ff8e31-51ef-4d68-8d4e-45043a8dc09e", "record_id": "flaws_cloudtrail:0000173:61ff8e31-51ef-4d68-8d4e-45043a8dc09e", "row_index": 173, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ff8e31-51ef-4d68-8d4e-45043a8dc09e", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b93a2f-5391-4e2d-b445-615da60816be", "record_id": "flaws_cloudtrail:0000174:06b93a2f-5391-4e2d-b445-615da60816be", "row_index": 174, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b93a2f-5391-4e2d-b445-615da60816be", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478b53b5-9e1d-46f1-a051-31a8d4fd4a3a", "record_id": "flaws_cloudtrail:0000175:478b53b5-9e1d-46f1-a051-31a8d4fd4a3a", "row_index": 175, "timestamp": "2018-07-29T15:29:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478b53b5-9e1d-46f1-a051-31a8d4fd4a3a", "eventTime": "2018-07-29T15:29:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beadb334-50dd-4b39-9d1e-1839a066ce77", "record_id": "flaws_cloudtrail:0000176:beadb334-50dd-4b39-9d1e-1839a066ce77", "row_index": 176, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beadb334-50dd-4b39-9d1e-1839a066ce77", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591754a-27ec-4a5d-8a1b-a8d43749304d", "record_id": "flaws_cloudtrail:0000177:591754a-27ec-4a5d-8a1b-a8d43749304d", "row_index": 177, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591754a-27ec-4a5d-8a1b-a8d43749304d", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3accf4-b1c4-4280-a9b3-7163f56af1a4", "record_id": "flaws_cloudtrail:0000178:8d3accf4-b1c4-4280-a9b3-7163f56af1a4", "row_index": 178, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3accf4-b1c4-4280-a9b3-7163f56af1a4", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9ac4ef-75de-4ada-96cf-39499cd0d576", "record_id": "flaws_cloudtrail:0000179:6e9ac4ef-75de-4ada-96cf-39499cd0d576", "row_index": 179, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9ac4ef-75de-4ada-96cf-39499cd0d576", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d18a975d-32d3-4800-ad6c-3ef769131912", "record_id": "flaws_cloudtrail:0000180:d18a975d-32d3-4800-ad6c-3ef769131912", "row_index": 180, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d18a975d-32d3-4800-ad6c-3ef769131912", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc51977f-f184-4349-b3b2-edd51eab9236", "record_id": "flaws_cloudtrail:0000181:fc51977f-f184-4349-b3b2-edd51eab9236", "row_index": 181, "timestamp": "2018-07-29T15:29:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc51977f-f184-4349-b3b2-edd51eab9236", "eventTime": "2018-07-29T15:29:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f281d2e-0077-4a9a-a1af-23037e1a91a4", "record_id": "flaws_cloudtrail:0000182:6f281d2e-0077-4a9a-a1af-23037e1a91a4", "row_index": 182, "timestamp": "2018-07-29T15:29:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f281d2e-0077-4a9a-a1af-23037e1a91a4", "eventTime": "2018-07-29T15:29:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ab78cf-73d6-491e-a5a7-fdb999a79080", "record_id": "flaws_cloudtrail:0000183:d1ab78cf-73d6-491e-a5a7-fdb999a79080", "row_index": 183, "timestamp": "2018-07-29T15:29:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ab78cf-73d6-491e-a5a7-fdb999a79080", "eventTime": "2018-07-29T15:29:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b251b40-c632-41cd-8983-d76001d21c2", "record_id": "flaws_cloudtrail:0000184:7b251b40-c632-41cd-8983-d76001d21c2", "row_index": 184, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b251b40-c632-41cd-8983-d76001d21c2", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ae6fa8-d57d-4f45-8552-526768f9b2e4", "record_id": "flaws_cloudtrail:0000185:55ae6fa8-d57d-4f45-8552-526768f9b2e4", "row_index": 185, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ae6fa8-d57d-4f45-8552-526768f9b2e4", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9efc1df-9b0a-4d88-b225-8bd8c452260b2", "record_id": "flaws_cloudtrail:0000186:d9efc1df-9b0a-4d88-b225-8bd8c452260b2", "row_index": 186, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9efc1df-9b0a-4d88-b225-8bd8c452260b2", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ee3cc0-7dd7-4111-a4c1-75c5a253cfde", "record_id": "flaws_cloudtrail:0000187:86ee3cc0-7dd7-4111-a4c1-75c5a253cfde", "row_index": 187, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ee3cc0-7dd7-4111-a4c1-75c5a253cfde", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8115ea13-8842-483b-9029-1c8d3007def0", "record_id": "flaws_cloudtrail:0000188:8115ea13-8842-483b-9029-1c8d3007def0", "row_index": 188, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8115ea13-8842-483b-9029-1c8d3007def0", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "146e9a28-c4db-4ece-b444-011522d6907", "record_id": "flaws_cloudtrail:0000189:146e9a28-c4db-4ece-b444-011522d6907", "row_index": 189, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "146e9a28-c4db-4ece-b444-011522d6907", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c8776d6-9242-4c22-8b66-9af434c858f8", "record_id": "flaws_cloudtrail:0000190:0c8776d6-9242-4c22-8b66-9af434c858f8", "row_index": 190, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c8776d6-9242-4c22-8b66-9af434c858f8", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ec9c072-9caa-4566-ab05-8ae120671eb9", "record_id": "flaws_cloudtrail:0000191:6ec9c072-9caa-4566-ab05-8ae120671eb9", "row_index": 191, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGBTX0EH665Q7PI57", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ec9c072-9caa-4566-ab05-8ae120671eb9", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGBTX0EH665Q7PI57", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0927a0bd-8ecf-4b5f-b4cd-a954eeaf1a1c", "record_id": "flaws_cloudtrail:0000192:0927a0bd-8ecf-4b5f-b4cd-a954eeaf1a1c", "row_index": 192, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0927a0bd-8ecf-4b5f-b4cd-a954eeaf1a1c", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14058-f4c5-4a72-98c3-301c7c24ff6d", "record_id": "flaws_cloudtrail:0000193:14058-f4c5-4a72-98c3-301c7c24ff6d", "row_index": 193, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14058-f4c5-4a72-98c3-301c7c24ff6d", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae86b866-fb0f-419f-ac4d-605cdc03b3c3", "record_id": "flaws_cloudtrail:0000194:ae86b866-fb0f-419f-ac4d-605cdc03b3c3", "row_index": 194, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae86b866-fb0f-419f-ac4d-605cdc03b3c3", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288e2d68-4b95-46ad-a060-dc5bee7d5806", "record_id": "flaws_cloudtrail:0000195:288e2d68-4b95-46ad-a060-dc5bee7d5806", "row_index": 195, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288e2d68-4b95-46ad-a060-dc5bee7d5806", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d85794-9eda-4403-8a50-8fb108a47ec9", "record_id": "flaws_cloudtrail:0000196:5d85794-9eda-4403-8a50-8fb108a47ec9", "row_index": 196, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d85794-9eda-4403-8a50-8fb108a47ec9", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eaeb1f9-ef3e-4d59-b25c-400fcd02eebd", "record_id": "flaws_cloudtrail:0000197:4eaeb1f9-ef3e-4d59-b25c-400fcd02eebd", "row_index": 197, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eaeb1f9-ef3e-4d59-b25c-400fcd02eebd", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd32aa81-abfc-4ae1-9c1a-a94987435966", "record_id": "flaws_cloudtrail:0000198:fd32aa81-abfc-4ae1-9c1a-a94987435966", "row_index": 198, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd32aa81-abfc-4ae1-9c1a-a94987435966", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3f474f-a60a-4e42-a30e-b9e642802be9", "record_id": "flaws_cloudtrail:0000199:ab3f474f-a60a-4e42-a30e-b9e642802be9", "row_index": 199, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3f474f-a60a-4e42-a30e-b9e642802be9", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f0a0a36-4c3f-449d-872f-2f2038c90ba6", "record_id": "flaws_cloudtrail:0000200:7f0a0a36-4c3f-449d-872f-2f2038c90ba6", "row_index": 200, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f0a0a36-4c3f-449d-872f-2f2038c90ba6", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76dd6b17-f1b3-447f-9186-c5fb80598e", "record_id": "flaws_cloudtrail:0000201:76dd6b17-f1b3-447f-9186-c5fb80598e", "row_index": 201, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76dd6b17-f1b3-447f-9186-c5fb80598e", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92ca62ca-c411-41e1-97c8-bc10283df76", "record_id": "flaws_cloudtrail:0000202:92ca62ca-c411-41e1-97c8-bc10283df76", "row_index": 202, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92ca62ca-c411-41e1-97c8-bc10283df76", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bf66dc-c1c8-4444-8634-d1e71e6e745e", "record_id": "flaws_cloudtrail:0000203:d6bf66dc-c1c8-4444-8634-d1e71e6e745e", "row_index": 203, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bf66dc-c1c8-4444-8634-d1e71e6e745e", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61b7036a-e221-42b8-8e97-8e2fe15dc39f", "record_id": "flaws_cloudtrail:0000204:61b7036a-e221-42b8-8e97-8e2fe15dc39f", "row_index": 204, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61b7036a-e221-42b8-8e97-8e2fe15dc39f", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74df23c3-83f1-4925-9482-e1a596042", "record_id": "flaws_cloudtrail:0000205:74df23c3-83f1-4925-9482-e1a596042", "row_index": 205, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74df23c3-83f1-4925-9482-e1a596042", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd2e8221-fe06-404b-80af-c85cd89941db", "record_id": "flaws_cloudtrail:0000206:cd2e8221-fe06-404b-80af-c85cd89941db", "row_index": 206, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA0YHSTKYJJ6YGMYV0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd2e8221-fe06-404b-80af-c85cd89941db", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA0YHSTKYJJ6YGMYV0", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:23Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "414cc2a4-1f4b-47dc-9bbf-ec68cb43214d", "record_id": "flaws_cloudtrail:0000207:414cc2a4-1f4b-47dc-9bbf-ec68cb43214d", "row_index": 207, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "414cc2a4-1f4b-47dc-9bbf-ec68cb43214d", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a2daa98-19e7-44c5-a5d4-806c14df9d40", "record_id": "flaws_cloudtrail:0000208:4a2daa98-19e7-44c5-a5d4-806c14df9d40", "row_index": 208, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a2daa98-19e7-44c5-a5d4-806c14df9d40", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "214f27ca-2ebc-4dd2-a010-4f9a0aac3297", "record_id": "flaws_cloudtrail:0000209:214f27ca-2ebc-4dd2-a010-4f9a0aac3297", "row_index": 209, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "214f27ca-2ebc-4dd2-a010-4f9a0aac3297", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc2f7d9-24b5-43c5-a9af-21c1dc39843d", "record_id": "flaws_cloudtrail:0000210:7fc2f7d9-24b5-43c5-a9af-21c1dc39843d", "row_index": 210, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc2f7d9-24b5-43c5-a9af-21c1dc39843d", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9ec28f1-90ec-4c80-a18f-7fa280d207af", "record_id": "flaws_cloudtrail:0000211:a9ec28f1-90ec-4c80-a18f-7fa280d207af", "row_index": 211, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9ec28f1-90ec-4c80-a18f-7fa280d207af", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97739c24-8d26-4eaf-8242-ce1c62cddd30", "record_id": "flaws_cloudtrail:0000212:97739c24-8d26-4eaf-8242-ce1c62cddd30", "row_index": 212, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97739c24-8d26-4eaf-8242-ce1c62cddd30", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37212f82-affc-4560-8cd0-957b2b3138d6", "record_id": "flaws_cloudtrail:0000213:37212f82-affc-4560-8cd0-957b2b3138d6", "row_index": 213, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37212f82-affc-4560-8cd0-957b2b3138d6", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcacfef9-3d8a-48f3-bf87-ed32f62defac", "record_id": "flaws_cloudtrail:0000214:bcacfef9-3d8a-48f3-bf87-ed32f62defac", "row_index": 214, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcacfef9-3d8a-48f3-bf87-ed32f62defac", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "500f04d3-97ab-4f5f-a29c-1fe9821eccb3", "record_id": "flaws_cloudtrail:0000215:500f04d3-97ab-4f5f-a29c-1fe9821eccb3", "row_index": 215, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "500f04d3-97ab-4f5f-a29c-1fe9821eccb3", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30216e2-0627-4f22-88d2-933fc3505d81", "record_id": "flaws_cloudtrail:0000216:30216e2-0627-4f22-88d2-933fc3505d81", "row_index": 216, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30216e2-0627-4f22-88d2-933fc3505d81", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a128b374-a845-4702-9e36-37904b4290be", "record_id": "flaws_cloudtrail:0000217:a128b374-a845-4702-9e36-37904b4290be", "row_index": 217, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a128b374-a845-4702-9e36-37904b4290be", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64932fb-aece-4981-b529-601e0fc4c714", "record_id": "flaws_cloudtrail:0000218:64932fb-aece-4981-b529-601e0fc4c714", "row_index": 218, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64932fb-aece-4981-b529-601e0fc4c714", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa1e18a-0d4b-40d4-816b-3a148adec2ec", "record_id": "flaws_cloudtrail:0000219:3fa1e18a-0d4b-40d4-816b-3a148adec2ec", "row_index": 219, "timestamp": "2018-07-29T15:29:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa1e18a-0d4b-40d4-816b-3a148adec2ec", "eventTime": "2018-07-29T15:29:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e346807-a2bd-40ed-982e-993fdf15b76d", "record_id": "flaws_cloudtrail:0000220:e346807-a2bd-40ed-982e-993fdf15b76d", "row_index": 220, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASKO0SAC39W533MQU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e346807-a2bd-40ed-982e-993fdf15b76d", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASKO0SAC39W533MQU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:14Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4af751f-eb73-47f6-b4f3-447aef855cab", "record_id": "flaws_cloudtrail:0000221:c4af751f-eb73-47f6-b4f3-447aef855cab", "row_index": 221, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4af751f-eb73-47f6-b4f3-447aef855cab", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3d8561e-7bd5-4ad8-a182-37d3218dbb09", "record_id": "flaws_cloudtrail:0000222:b3d8561e-7bd5-4ad8-a182-37d3218dbb09", "row_index": 222, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3d8561e-7bd5-4ad8-a182-37d3218dbb09", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937999a2c-5169-416d-82f0-d09f4c4dee88", "record_id": "flaws_cloudtrail:0000223:937999a2c-5169-416d-82f0-d09f4c4dee88", "row_index": 223, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937999a2c-5169-416d-82f0-d09f4c4dee88", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9609e51-48bb-4c72-818a-b19683ef3f42", "record_id": "flaws_cloudtrail:0000224:b9609e51-48bb-4c72-818a-b19683ef3f42", "row_index": 224, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9609e51-48bb-4c72-818a-b19683ef3f42", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36dbafab-e2b3-4e52-8ef0-db68c44c578f", "record_id": "flaws_cloudtrail:0000225:36dbafab-e2b3-4e52-8ef0-db68c44c578f", "row_index": 225, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIALOUB1UX9FP3DQUTA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36dbafab-e2b3-4e52-8ef0-db68c44c578f", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIALOUB1UX9FP3DQUTA", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:25Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79c4bc8-7e1b-493e-aef1-b91a915a4044", "record_id": "flaws_cloudtrail:0000226:b79c4bc8-7e1b-493e-aef1-b91a915a4044", "row_index": 226, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79c4bc8-7e1b-493e-aef1-b91a915a4044", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b380b00c-5a94-47fc-9f02-5494e4da0341", "record_id": "flaws_cloudtrail:0000227:b380b00c-5a94-47fc-9f02-5494e4da0341", "row_index": 227, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b380b00c-5a94-47fc-9f02-5494e4da0341", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17ddfb08-6d35-41ca-9f30-8b62b476379", "record_id": "flaws_cloudtrail:0000228:17ddfb08-6d35-41ca-9f30-8b62b476379", "row_index": 228, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17ddfb08-6d35-41ca-9f30-8b62b476379", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37ea08e1-96e3-4222-8b72-2d48163e0474", "record_id": "flaws_cloudtrail:0000229:37ea08e1-96e3-4222-8b72-2d48163e0474", "row_index": 229, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37ea08e1-96e3-4222-8b72-2d48163e0474", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52d588d1-023a-4f5f-ac37-9c5241de9a2d", "record_id": "flaws_cloudtrail:0000230:52d588d1-023a-4f5f-ac37-9c5241de9a2d", "row_index": 230, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52d588d1-023a-4f5f-ac37-9c5241de9a2d", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d83e6c-90f1-463a-b717-56b9a8e3744f", "record_id": "flaws_cloudtrail:0000231:29d83e6c-90f1-463a-b717-56b9a8e3744f", "row_index": 231, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d83e6c-90f1-463a-b717-56b9a8e3744f", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34731b9b-1c6a-4d9a-8ff4-50350d9f", "record_id": "flaws_cloudtrail:0000232:34731b9b-1c6a-4d9a-8ff4-50350d9f", "row_index": 232, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34731b9b-1c6a-4d9a-8ff4-50350d9f", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "859a17fd-b7e7-41e7-8aeb-cebec3f92af5", "record_id": "flaws_cloudtrail:0000233:859a17fd-b7e7-41e7-8aeb-cebec3f92af5", "row_index": 233, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "859a17fd-b7e7-41e7-8aeb-cebec3f92af5", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c67f0f-ca33-4a77-8256-09d689fc793c", "record_id": "flaws_cloudtrail:0000234:a1c67f0f-ca33-4a77-8256-09d689fc793c", "row_index": 234, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c67f0f-ca33-4a77-8256-09d689fc793c", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3c441223-20f4-49b6-88e8-27eff6b3c469", "record_id": "flaws_cloudtrail:0000235:e3c441223-20f4-49b6-88e8-27eff6b3c469", "row_index": 235, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3c441223-20f4-49b6-88e8-27eff6b3c469", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efc14cdf-5396-445b-b8b3-feb423508", "record_id": "flaws_cloudtrail:0000236:efc14cdf-5396-445b-b8b3-feb423508", "row_index": 236, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efc14cdf-5396-445b-b8b3-feb423508", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311982-2219-48fb-bb6c-1b4489c2e4dc", "record_id": "flaws_cloudtrail:0000237:311982-2219-48fb-bb6c-1b4489c2e4dc", "row_index": 237, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311982-2219-48fb-bb6c-1b4489c2e4dc", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19c457452-605f-4615-8081-290f344e1787", "record_id": "flaws_cloudtrail:0000238:19c457452-605f-4615-8081-290f344e1787", "row_index": 238, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19c457452-605f-4615-8081-290f344e1787", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecf6f3e8-780b-4252-8dc5-dfe47ab41e4c", "record_id": "flaws_cloudtrail:0000239:ecf6f3e8-780b-4252-8dc5-dfe47ab41e4c", "row_index": 239, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecf6f3e8-780b-4252-8dc5-dfe47ab41e4c", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3c3557-7aca-42c2-a91d-bee94688b7f1", "record_id": "flaws_cloudtrail:0000240:1c3c3557-7aca-42c2-a91d-bee94688b7f1", "row_index": 240, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3c3557-7aca-42c2-a91d-bee94688b7f1", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f995292-a927-4dcd-9e0f-acdbcb228d59", "record_id": "flaws_cloudtrail:0000241:f995292-a927-4dcd-9e0f-acdbcb228d59", "row_index": 241, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f995292-a927-4dcd-9e0f-acdbcb228d59", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4142aef3-6bfb-406a-9580-4c1a73968ab", "record_id": "flaws_cloudtrail:0000242:4142aef3-6bfb-406a-9580-4c1a73968ab", "row_index": 242, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4142aef3-6bfb-406a-9580-4c1a73968ab", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06a5f01b-8d87-4b99-bcf5-c6d1d8648c49", "record_id": "flaws_cloudtrail:0000243:06a5f01b-8d87-4b99-bcf5-c6d1d8648c49", "row_index": 243, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06a5f01b-8d87-4b99-bcf5-c6d1d8648c49", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d95235-9025-4ca7-b425-ddc536ffa5c7", "record_id": "flaws_cloudtrail:0000244:77d95235-9025-4ca7-b425-ddc536ffa5c7", "row_index": 244, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d95235-9025-4ca7-b425-ddc536ffa5c7", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af3c6d4-b800-4ec3-9f86-ef0bce4dcd30", "record_id": "flaws_cloudtrail:0000245:5af3c6d4-b800-4ec3-9f86-ef0bce4dcd30", "row_index": 245, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af3c6d4-b800-4ec3-9f86-ef0bce4dcd30", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bfbadf2-7a54-4b06-899f-1ef988e47be8", "record_id": "flaws_cloudtrail:0000246:4bfbadf2-7a54-4b06-899f-1ef988e47be8", "row_index": 246, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bfbadf2-7a54-4b06-899f-1ef988e47be8", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676c967d-a390-4264-ba0e-abb71734b6e6", "record_id": "flaws_cloudtrail:0000247:676c967d-a390-4264-ba0e-abb71734b6e6", "row_index": 247, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676c967d-a390-4264-ba0e-abb71734b6e6", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411a7f2c-4ad4-41af-b9f4-b20c8b6b1646", "record_id": "flaws_cloudtrail:0000248:411a7f2c-4ad4-41af-b9f4-b20c8b6b1646", "row_index": 248, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411a7f2c-4ad4-41af-b9f4-b20c8b6b1646", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b9c148a-6c32-49ae-a274-c429d6f3c4f2", "record_id": "flaws_cloudtrail:0000249:1b9c148a-6c32-49ae-a274-c429d6f3c4f2", "row_index": 249, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b9c148a-6c32-49ae-a274-c429d6f3c4f2", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aff939f2-440b-49a2-96e5-86cc732755b", "record_id": "flaws_cloudtrail:0000250:aff939f2-440b-49a2-96e5-86cc732755b", "row_index": 250, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aff939f2-440b-49a2-96e5-86cc732755b", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17835fe-531b-4de8-b57b-85ebdf5b47f8", "record_id": "flaws_cloudtrail:0000251:17835fe-531b-4de8-b57b-85ebdf5b47f8", "row_index": 251, "timestamp": "2018-07-29T15:29:25Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17835fe-531b-4de8-b57b-85ebdf5b47f8", "eventTime": "2018-07-29T15:29:25Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f94c486f-dc0c-4235-8470-a391c898f809", "record_id": "flaws_cloudtrail:0000252:f94c486f-dc0c-4235-8470-a391c898f809", "row_index": 252, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f94c486f-dc0c-4235-8470-a391c898f809", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83af4c3c-719e-4be3-bc64-332a81deb149", "record_id": "flaws_cloudtrail:0000253:83af4c3c-719e-4be3-bc64-332a81deb149", "row_index": 253, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAAZANMR8TQTLC17SD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83af4c3c-719e-4be3-bc64-332a81deb149", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAAZANMR8TQTLC17SD", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "addbe6e0-aa6b-4158-af3e-8a6843960a17", "record_id": "flaws_cloudtrail:0000254:addbe6e0-aa6b-4158-af3e-8a6843960a17", "row_index": 254, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "addbe6e0-aa6b-4158-af3e-8a6843960a17", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a082c889-0098-45b0-acc1-c7c4bb6d16e5", "record_id": "flaws_cloudtrail:0000255:a082c889-0098-45b0-acc1-c7c4bb6d16e5", "row_index": 255, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a082c889-0098-45b0-acc1-c7c4bb6d16e5", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb93e9a-e864-4263-b7c1-2a070e2bc019", "record_id": "flaws_cloudtrail:0000256:6eb93e9a-e864-4263-b7c1-2a070e2bc019", "row_index": 256, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb93e9a-e864-4263-b7c1-2a070e2bc019", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7602eed4-2f29-4e08-ad74-a2967e8b1eeb", "record_id": "flaws_cloudtrail:0000257:7602eed4-2f29-4e08-ad74-a2967e8b1eeb", "row_index": 257, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7602eed4-2f29-4e08-ad74-a2967e8b1eeb", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7fc0c7-cd86-4a9f-a2ab-2caf087b048b", "record_id": "flaws_cloudtrail:0000258:9c7fc0c7-cd86-4a9f-a2ab-2caf087b048b", "row_index": 258, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIANB8NQARL1F3H5OMM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7fc0c7-cd86-4a9f-a2ab-2caf087b048b", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIANB8NQARL1F3H5OMM", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:13Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5da19a1-b8f9-429b-b676-f18ef7035d68", "record_id": "flaws_cloudtrail:0000259:c5da19a1-b8f9-429b-b676-f18ef7035d68", "row_index": 259, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5da19a1-b8f9-429b-b676-f18ef7035d68", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fc7042-4535-4445-b499-bb6a2ff24deb", "record_id": "flaws_cloudtrail:0000260:d1fc7042-4535-4445-b499-bb6a2ff24deb", "row_index": 260, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA1Y2RVNYUY11QFUDK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fc7042-4535-4445-b499-bb6a2ff24deb", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA1Y2RVNYUY11QFUDK", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:24Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c520bb95-a155-4056-a939-d8797a197232", "record_id": "flaws_cloudtrail:0000261:c520bb95-a155-4056-a939-d8797a197232", "row_index": 261, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c520bb95-a155-4056-a939-d8797a197232", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ca6f5c-b300-4d3c-8032-840c0eb01b9b", "record_id": "flaws_cloudtrail:0000262:d3ca6f5c-b300-4d3c-8032-840c0eb01b9b", "row_index": 262, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAMYXQMK41DVJFU054", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ca6f5c-b300-4d3c-8032-840c0eb01b9b", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAMYXQMK41DVJFU054", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:26Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0734c458-2246-4662-8e89-104d31a70e16", "record_id": "flaws_cloudtrail:0000263:0734c458-2246-4662-8e89-104d31a70e16", "row_index": 263, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAN2BLOKRI66M9MBOZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0734c458-2246-4662-8e89-104d31a70e16", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAN2BLOKRI66M9MBOZ", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:26Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac6b36a2-78bb-452a-be9b-b5bf2d78d9b5", "record_id": "flaws_cloudtrail:0000264:ac6b36a2-78bb-452a-be9b-b5bf2d78d9b5", "row_index": 264, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac6b36a2-78bb-452a-be9b-b5bf2d78d9b5", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f894240-d0df-46c8-b7da-1c60d5f140c6", "record_id": "flaws_cloudtrail:0000265:8f894240-d0df-46c8-b7da-1c60d5f140c6", "row_index": 265, "timestamp": "2018-07-29T15:29:26Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f894240-d0df-46c8-b7da-1c60d5f140c6", "eventTime": "2018-07-29T15:29:26Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982cd771-f8ec-45dd-9f3b-f63bc656595c", "record_id": "flaws_cloudtrail:0000266:982cd771-f8ec-45dd-9f3b-f63bc656595c", "row_index": 266, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982cd771-f8ec-45dd-9f3b-f63bc656595c", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9dc7591-a4e6-4f15-92e7-7642eee587744", "record_id": "flaws_cloudtrail:0000267:d9dc7591-a4e6-4f15-92e7-7642eee587744", "row_index": 267, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAP376GE69N0GGPFEP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9dc7591-a4e6-4f15-92e7-7642eee587744", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAP376GE69N0GGPFEP", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:28Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0fe73a-5f31-40c8-ba06-c39b020ea615", "record_id": "flaws_cloudtrail:0000268:4e0fe73a-5f31-40c8-ba06-c39b020ea615", "row_index": 268, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0fe73a-5f31-40c8-ba06-c39b020ea615", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d83f3ca-6784-4fe0-ba25-5560b5a1c6ac", "record_id": "flaws_cloudtrail:0000269:5d83f3ca-6784-4fe0-ba25-5560b5a1c6ac", "row_index": 269, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d83f3ca-6784-4fe0-ba25-5560b5a1c6ac", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6283ae4e-70a9-4ec3-8586-6f7a8fa7f28e", "record_id": "flaws_cloudtrail:0000270:6283ae4e-70a9-4ec3-8586-6f7a8fa7f28e", "row_index": 270, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6283ae4e-70a9-4ec3-8586-6f7a8fa7f28e", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b95e82f-332e-4937-a0fe-b08a118b4f4e", "record_id": "flaws_cloudtrail:0000271:5b95e82f-332e-4937-a0fe-b08a118b4f4e", "row_index": 271, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b95e82f-332e-4937-a0fe-b08a118b4f4e", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af291e0-f7e6-4078-bf0a-7ec01f2724f4", "record_id": "flaws_cloudtrail:0000272:0af291e0-f7e6-4078-bf0a-7ec01f2724f4", "row_index": 272, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af291e0-f7e6-4078-bf0a-7ec01f2724f4", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c66c3d8-357a-478c-b512-945d49c6cb5b", "record_id": "flaws_cloudtrail:0000273:2c66c3d8-357a-478c-b512-945d49c6cb5b", "row_index": 273, "timestamp": "2018-07-29T15:29:28Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c66c3d8-357a-478c-b512-945d49c6cb5b", "eventTime": "2018-07-29T15:29:28Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f7d65c-c20e-476e-a2f6-dc9b5468eb4e", "record_id": "flaws_cloudtrail:0000274:c8f7d65c-c20e-476e-a2f6-dc9b5468eb4e", "row_index": 274, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f7d65c-c20e-476e-a2f6-dc9b5468eb4e", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ff2ff6-b783-407e-9c20-82461ffafb", "record_id": "flaws_cloudtrail:0000275:e3ff2ff6-b783-407e-9c20-82461ffafb", "row_index": 275, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ff2ff6-b783-407e-9c20-82461ffafb", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a5d5d89-c366-481f-8630-728d784f7492", "record_id": "flaws_cloudtrail:0000276:4a5d5d89-c366-481f-8630-728d784f7492", "row_index": 276, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a5d5d89-c366-481f-8630-728d784f7492", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae9ea2ae-3654-4e1d-af1a-153454e037dd", "record_id": "flaws_cloudtrail:0000277:ae9ea2ae-3654-4e1d-af1a-153454e037dd", "row_index": 277, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae9ea2ae-3654-4e1d-af1a-153454e037dd", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c72cb740-7128-4b1c-8bb9-bd7cdccf5373", "record_id": "flaws_cloudtrail:0000278:c72cb740-7128-4b1c-8bb9-bd7cdccf5373", "row_index": 278, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c72cb740-7128-4b1c-8bb9-bd7cdccf5373", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd68ade6-4c78-472f-a816-3bb7f25b5220", "record_id": "flaws_cloudtrail:0000279:dd68ade6-4c78-472f-a816-3bb7f25b5220", "row_index": 279, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd68ade6-4c78-472f-a816-3bb7f25b5220", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea23bd3-05d5-4821-a8ff-2682f50d86b4", "record_id": "flaws_cloudtrail:0000280:bea23bd3-05d5-4821-a8ff-2682f50d86b4", "row_index": 280, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea23bd3-05d5-4821-a8ff-2682f50d86b4", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696cb4f7-f257-4537-acf0-d5f276cdcba1", "record_id": "flaws_cloudtrail:0000281:696cb4f7-f257-4537-acf0-d5f276cdcba1", "row_index": 281, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696cb4f7-f257-4537-acf0-d5f276cdcba1", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a48e6131-4825-41cc-8e63-e1003efa4ec7", "record_id": "flaws_cloudtrail:0000282:a48e6131-4825-41cc-8e63-e1003efa4ec7", "row_index": 282, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a48e6131-4825-41cc-8e63-e1003efa4ec7", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf12f748-6f02-475e-87f3-841ca32e20e9", "record_id": "flaws_cloudtrail:0000283:bf12f748-6f02-475e-87f3-841ca32e20e9", "row_index": 283, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf12f748-6f02-475e-87f3-841ca32e20e9", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66d65d43-bb63-4c39-9a70-346fe523aff2", "record_id": "flaws_cloudtrail:0000284:66d65d43-bb63-4c39-9a70-346fe523aff2", "row_index": 284, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66d65d43-bb63-4c39-9a70-346fe523aff2", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41331e92-eea5-4f7e-8b73-251866c7fdad", "record_id": "flaws_cloudtrail:0000285:41331e92-eea5-4f7e-8b73-251866c7fdad", "row_index": 285, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41331e92-eea5-4f7e-8b73-251866c7fdad", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c13d203e-fd37-484e-a874-bf6c7c46e7bc", "record_id": "flaws_cloudtrail:0000286:c13d203e-fd37-484e-a874-bf6c7c46e7bc", "row_index": 286, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c13d203e-fd37-484e-a874-bf6c7c46e7bc", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c69d889-127a-4970-b4d7-4a20c6819e69", "record_id": "flaws_cloudtrail:0000287:2c69d889-127a-4970-b4d7-4a20c6819e69", "row_index": 287, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c69d889-127a-4970-b4d7-4a20c6819e69", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ddad481-ca2c-4255-ae28-1e5d5e9d1157", "record_id": "flaws_cloudtrail:0000288:9ddad481-ca2c-4255-ae28-1e5d5e9d1157", "row_index": 288, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ddad481-ca2c-4255-ae28-1e5d5e9d1157", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a1e8bb-c0b2-4791-ba39-35dfce5aa7c8", "record_id": "flaws_cloudtrail:0000289:63a1e8bb-c0b2-4791-ba39-35dfce5aa7c8", "row_index": 289, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a1e8bb-c0b2-4791-ba39-35dfce5aa7c8", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13d43630-4cef-4990-8ec6-7cb02f37192c", "record_id": "flaws_cloudtrail:0000290:13d43630-4cef-4990-8ec6-7cb02f37192c", "row_index": 290, "timestamp": "2018-07-29T15:29:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13d43630-4cef-4990-8ec6-7cb02f37192c", "eventTime": "2018-07-29T15:29:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dbda13c-8b50-45e9-a864-f149f38d6a05", "record_id": "flaws_cloudtrail:0000291:7dbda13c-8b50-45e9-a864-f149f38d6a05", "row_index": 291, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dbda13c-8b50-45e9-a864-f149f38d6a05", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3805fe0-b4f0-48aa-9ee5-2f5b3b9ce4eb", "record_id": "flaws_cloudtrail:0000292:c3805fe0-b4f0-48aa-9ee5-2f5b3b9ce4eb", "row_index": 292, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASSM2J67G1A3OSM2A", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3805fe0-b4f0-48aa-9ee5-2f5b3b9ce4eb", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASSM2J67G1A3OSM2A", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:26Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48fb6db6-e2da-4ce0-aeb7-5e5dcfd53900", "record_id": "flaws_cloudtrail:0000293:48fb6db6-e2da-4ce0-aeb7-5e5dcfd53900", "row_index": 293, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48fb6db6-e2da-4ce0-aeb7-5e5dcfd53900", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53122f-94db-4855-9990-175e96346e", "record_id": "flaws_cloudtrail:0000294:53122f-94db-4855-9990-175e96346e", "row_index": 294, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53122f-94db-4855-9990-175e96346e", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c30c98-f694-4898-b9f2-5ff161e401201", "record_id": "flaws_cloudtrail:0000295:78c30c98-f694-4898-b9f2-5ff161e401201", "row_index": 295, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c30c98-f694-4898-b9f2-5ff161e401201", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84736b39-9a08-4b2c-bde1-d70d7138cdfc", "record_id": "flaws_cloudtrail:0000296:84736b39-9a08-4b2c-bde1-d70d7138cdfc", "row_index": 296, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84736b39-9a08-4b2c-bde1-d70d7138cdfc", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e501676-dd36-4f5e-9bd1-f9e9582cc92c", "record_id": "flaws_cloudtrail:0000297:9e501676-dd36-4f5e-9bd1-f9e9582cc92c", "row_index": 297, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e501676-dd36-4f5e-9bd1-f9e9582cc92c", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2284cea8-be7a-416d-a3f3-964c973609", "record_id": "flaws_cloudtrail:0000298:2284cea8-be7a-416d-a3f3-964c973609", "row_index": 298, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2284cea8-be7a-416d-a3f3-964c973609", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34beb591-413d-46db-91a5-9ab5d4eec6f9", "record_id": "flaws_cloudtrail:0000299:34beb591-413d-46db-91a5-9ab5d4eec6f9", "row_index": 299, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34beb591-413d-46db-91a5-9ab5d4eec6f9", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a7b199-cf46-4b1f-91de-98c64529618e", "record_id": "flaws_cloudtrail:0000300:d8a7b199-cf46-4b1f-91de-98c64529618e", "row_index": 300, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a7b199-cf46-4b1f-91de-98c64529618e", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03c87ef0-1506-46b1-8f96-c61e049abacf", "record_id": "flaws_cloudtrail:0000301:03c87ef0-1506-46b1-8f96-c61e049abacf", "row_index": 301, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03c87ef0-1506-46b1-8f96-c61e049abacf", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24a8a45a-b2ab-4b7c-8390-e534fdbffcc9", "record_id": "flaws_cloudtrail:0000302:24a8a45a-b2ab-4b7c-8390-e534fdbffcc9", "row_index": 302, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24a8a45a-b2ab-4b7c-8390-e534fdbffcc9", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20cd44d-7df6-46e8-8679-4a938051deaa7", "record_id": "flaws_cloudtrail:0000303:b20cd44d-7df6-46e8-8679-4a938051deaa7", "row_index": 303, "timestamp": "2018-07-29T15:29:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20cd44d-7df6-46e8-8679-4a938051deaa7", "eventTime": "2018-07-29T15:29:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f9d096c-6344-4942-bcaa-32a325919319", "record_id": "flaws_cloudtrail:0000304:5f9d096c-6344-4942-bcaa-32a325919319", "row_index": 304, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f9d096c-6344-4942-bcaa-32a325919319", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa4e1355-25f9-4395-b164-fbaf4a0dac9a", "record_id": "flaws_cloudtrail:0000305:fa4e1355-25f9-4395-b164-fbaf4a0dac9a", "row_index": 305, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa4e1355-25f9-4395-b164-fbaf4a0dac9a", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdbd6986-733b-4ab9-8e3d-568ec9902415", "record_id": "flaws_cloudtrail:0000306:bdbd6986-733b-4ab9-8e3d-568ec9902415", "row_index": 306, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdbd6986-733b-4ab9-8e3d-568ec9902415", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bee02c2-e8c0-4b07-8ce9-754f574c654b", "record_id": "flaws_cloudtrail:0000307:5bee02c2-e8c0-4b07-8ce9-754f574c654b", "row_index": 307, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bee02c2-e8c0-4b07-8ce9-754f574c654b", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddcc67a3-fb21-4ae7-bbe6-8cf66f91f623", "record_id": "flaws_cloudtrail:0000308:ddcc67a3-fb21-4ae7-bbe6-8cf66f91f623", "row_index": 308, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIABIFIXERE8709B03B", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddcc67a3-fb21-4ae7-bbe6-8cf66f91f623", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIABIFIXERE8709B03B", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:31Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a226c3bf-39fd-4034-8ddc-be45fb58ce57", "record_id": "flaws_cloudtrail:0000309:a226c3bf-39fd-4034-8ddc-be45fb58ce57", "row_index": 309, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIASK36KGE5MU6V591F", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a226c3bf-39fd-4034-8ddc-be45fb58ce57", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIASK36KGE5MU6V591F", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:29Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dede0c7-c498-42b1-b52b-131a8b34370e", "record_id": "flaws_cloudtrail:0000310:0dede0c7-c498-42b1-b52b-131a8b34370e", "row_index": 310, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dede0c7-c498-42b1-b52b-131a8b34370e", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df702e7-0b4d-4110-ac02-17cb976c9c64", "record_id": "flaws_cloudtrail:0000311:7df702e7-0b4d-4110-ac02-17cb976c9c64", "row_index": 311, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df702e7-0b4d-4110-ac02-17cb976c9c64", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02502d7-04e3-49bc-8ee8-fd3b536da2a1", "record_id": "flaws_cloudtrail:0000312:02502d7-04e3-49bc-8ee8-fd3b536da2a1", "row_index": 312, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAV80MQMXLX762S8XF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02502d7-04e3-49bc-8ee8-fd3b536da2a1", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAV80MQMXLX762S8XF", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:29Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "068daaad-7e14-42c2-98c3-d8ca6a530c07", "record_id": "flaws_cloudtrail:0000313:068daaad-7e14-42c2-98c3-d8ca6a530c07", "row_index": 313, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "068daaad-7e14-42c2-98c3-d8ca6a530c07", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf261f55-aee6-4cea-b99d-e8e1016f958d", "record_id": "flaws_cloudtrail:0000314:bf261f55-aee6-4cea-b99d-e8e1016f958d", "row_index": 314, "timestamp": "2018-07-29T15:29:31Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf261f55-aee6-4cea-b99d-e8e1016f958d", "eventTime": "2018-07-29T15:29:31Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720812-c501-4060-94c8-d1f75b19082", "record_id": "flaws_cloudtrail:0000315:720812-c501-4060-94c8-d1f75b19082", "row_index": 315, "timestamp": "2018-07-29T15:29:32Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAOGI8VRALUXD99Q5F", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720812-c501-4060-94c8-d1f75b19082", "eventTime": "2018-07-29T15:29:32Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAOGI8VRALUXD99Q5F", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T15:29:28Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca046a1-a674-4738-a545-984ba46d450d", "record_id": "flaws_cloudtrail:0000316:bca046a1-a674-4738-a545-984ba46d450d", "row_index": 316, "timestamp": "2018-07-29T15:29:32Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca046a1-a674-4738-a545-984ba46d450d", "eventTime": "2018-07-29T15:29:32Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00e01312-10c5-47b5-b09d-aa2ad841633e", "record_id": "flaws_cloudtrail:0000317:00e01312-10c5-47b5-b09d-aa2ad841633e", "row_index": 317, "timestamp": "2018-07-29T15:29:34Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00e01312-10c5-47b5-b09d-aa2ad841633e", "eventTime": "2018-07-29T15:29:34Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51a90d1d-32e0-4962-832b-9516a4e9fab8", "record_id": "flaws_cloudtrail:0000318:51a90d1d-32e0-4962-832b-9516a4e9fab8", "row_index": 318, "timestamp": "2018-07-29T15:29:35Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51a90d1d-32e0-4962-832b-9516a4e9fab8", "eventTime": "2018-07-29T15:29:35Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e398d85b-9c70-4bc0-a28d-6b06b890be5d", "record_id": "flaws_cloudtrail:0000319:e398d85b-9c70-4bc0-a28d-6b06b890be5d", "row_index": 319, "timestamp": "2018-07-29T15:29:35Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e398d85b-9c70-4bc0-a28d-6b06b890be5d", "eventTime": "2018-07-29T15:29:35Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd28b2bb-81f1-4688-969a-ec33f73e8fea", "record_id": "flaws_cloudtrail:0000320:cd28b2bb-81f1-4688-969a-ec33f73e8fea", "row_index": 320, "timestamp": "2018-07-29T15:29:35Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd28b2bb-81f1-4688-969a-ec33f73e8fea", "eventTime": "2018-07-29T15:29:35Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb36f128-4b27-4310-9b05-e41a29a681266", "record_id": "flaws_cloudtrail:0000321:cb36f128-4b27-4310-9b05-e41a29a681266", "row_index": 321, "timestamp": "2018-07-29T15:29:36Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb36f128-4b27-4310-9b05-e41a29a681266", "eventTime": "2018-07-29T15:29:36Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6cd713b-8921-42e1-893b-8e42f48d2a32", "record_id": "flaws_cloudtrail:0000322:c6cd713b-8921-42e1-893b-8e42f48d2a32", "row_index": 322, "timestamp": "2018-07-29T15:29:36Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6cd713b-8921-42e1-893b-8e42f48d2a32", "eventTime": "2018-07-29T15:29:36Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97707b-b08d-4dde-a096-fdc37afb85b3", "record_id": "flaws_cloudtrail:0000323:97707b-b08d-4dde-a096-fdc37afb85b3", "row_index": 323, "timestamp": "2018-07-29T15:29:37Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97707b-b08d-4dde-a096-fdc37afb85b3", "eventTime": "2018-07-29T15:29:37Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b17d99e3-29fe-48e1-a2b9-5da91f66ef1b", "record_id": "flaws_cloudtrail:0000324:b17d99e3-29fe-48e1-a2b9-5da91f66ef1b", "row_index": 324, "timestamp": "2018-07-29T15:29:37Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b17d99e3-29fe-48e1-a2b9-5da91f66ef1b", "eventTime": "2018-07-29T15:29:37Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a206118b0-c7d7-4fdb-934a-6073e4bcf1d9", "record_id": "flaws_cloudtrail:0000325:a206118b0-c7d7-4fdb-934a-6073e4bcf1d9", "row_index": 325, "timestamp": "2018-07-29T15:29:38Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a206118b0-c7d7-4fdb-934a-6073e4bcf1d9", "eventTime": "2018-07-29T15:29:38Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a75abc9-32a6-4b18-b058-1f4dc228f811", "record_id": "flaws_cloudtrail:0000326:5a75abc9-32a6-4b18-b058-1f4dc228f811", "row_index": 326, "timestamp": "2018-07-29T15:29:38Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a75abc9-32a6-4b18-b058-1f4dc228f811", "eventTime": "2018-07-29T15:29:38Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844912aec-d9dd-492c-8fe7-2d611231c9288", "record_id": "flaws_cloudtrail:0000327:844912aec-d9dd-492c-8fe7-2d611231c9288", "row_index": 327, "timestamp": "2018-07-29T15:29:38Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844912aec-d9dd-492c-8fe7-2d611231c9288", "eventTime": "2018-07-29T15:29:38Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d35cbb99-f675-49df-a71a-b117d528fd28", "record_id": "flaws_cloudtrail:0000328:d35cbb99-f675-49df-a71a-b117d528fd28", "row_index": 328, "timestamp": "2018-07-29T15:29:39Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d35cbb99-f675-49df-a71a-b117d528fd28", "eventTime": "2018-07-29T15:29:39Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5345a05-aa59-4ac9-b0a2-69a18d51df30", "record_id": "flaws_cloudtrail:0000329:d5345a05-aa59-4ac9-b0a2-69a18d51df30", "row_index": 329, "timestamp": "2018-07-29T15:29:39Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5345a05-aa59-4ac9-b0a2-69a18d51df30", "eventTime": "2018-07-29T15:29:39Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adad78db-aec9-457f-8a56-0c12e767800", "record_id": "flaws_cloudtrail:0000330:adad78db-aec9-457f-8a56-0c12e767800", "row_index": 330, "timestamp": "2018-07-29T15:29:39Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adad78db-aec9-457f-8a56-0c12e767800", "eventTime": "2018-07-29T15:29:39Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaf04bbb-5e08-4386-abeb-d343120e6950", "record_id": "flaws_cloudtrail:0000331:aaf04bbb-5e08-4386-abeb-d343120e6950", "row_index": 331, "timestamp": "2018-07-29T15:29:40Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaf04bbb-5e08-4386-abeb-d343120e6950", "eventTime": "2018-07-29T15:29:40Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc6ffa4d-0be8-4f02-b01e-d5fa2c40273f", "record_id": "flaws_cloudtrail:0000332:cc6ffa4d-0be8-4f02-b01e-d5fa2c40273f", "row_index": 332, "timestamp": "2018-07-29T15:29:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc6ffa4d-0be8-4f02-b01e-d5fa2c40273f", "eventTime": "2018-07-29T15:29:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d70c778-aa54-44c7-8b62-0e17d40ca76e", "record_id": "flaws_cloudtrail:0000333:1d70c778-aa54-44c7-8b62-0e17d40ca76e", "row_index": 333, "timestamp": "2018-07-29T15:29:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d70c778-aa54-44c7-8b62-0e17d40ca76e", "eventTime": "2018-07-29T15:29:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2e7aff-8ddd-4320-892e-a317cb2e8cb4", "record_id": "flaws_cloudtrail:0000334:dc2e7aff-8ddd-4320-892e-a317cb2e8cb4", "row_index": 334, "timestamp": "2018-07-29T15:29:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2e7aff-8ddd-4320-892e-a317cb2e8cb4", "eventTime": "2018-07-29T15:29:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fa9b153-8b57-49e6-ba14-95c938cd65b6", "record_id": "flaws_cloudtrail:0000335:4fa9b153-8b57-49e6-ba14-95c938cd65b6", "row_index": 335, "timestamp": "2018-07-29T15:29:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fa9b153-8b57-49e6-ba14-95c938cd65b6", "eventTime": "2018-07-29T15:29:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa9d45c-2d18-45d7-a593-32849b192995", "record_id": "flaws_cloudtrail:0000336:7aa9d45c-2d18-45d7-a593-32849b192995", "row_index": 336, "timestamp": "2018-07-29T15:29:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa9d45c-2d18-45d7-a593-32849b192995", "eventTime": "2018-07-29T15:29:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c04f450d-cc95-4190-bc17-7fadf44fe409", "record_id": "flaws_cloudtrail:0000337:c04f450d-cc95-4190-bc17-7fadf44fe409", "row_index": 337, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c04f450d-cc95-4190-bc17-7fadf44fe409", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f6b6b66-697f-4c22-a0e1-d6084b4521a1", "record_id": "flaws_cloudtrail:0000338:5f6b6b66-697f-4c22-a0e1-d6084b4521a1", "row_index": 338, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f6b6b66-697f-4c22-a0e1-d6084b4521a1", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69fc1fc-d11a-4090-b0be-934f8af74d9c", "record_id": "flaws_cloudtrail:0000339:a69fc1fc-d11a-4090-b0be-934f8af74d9c", "row_index": 339, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69fc1fc-d11a-4090-b0be-934f8af74d9c", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d450de5c-c1e0-42ea-8164-f0eb65e813d3", "record_id": "flaws_cloudtrail:0000340:d450de5c-c1e0-42ea-8164-f0eb65e813d3", "row_index": 340, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d450de5c-c1e0-42ea-8164-f0eb65e813d3", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4136f3-f2ef-4c67-9333-9cad551573f85", "record_id": "flaws_cloudtrail:0000341:8b4136f3-f2ef-4c67-9333-9cad551573f85", "row_index": 341, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4136f3-f2ef-4c67-9333-9cad551573f85", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "302fc3c8-6392-42a7-a631-b236f4c7035f", "record_id": "flaws_cloudtrail:0000342:302fc3c8-6392-42a7-a631-b236f4c7035f", "row_index": 342, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "302fc3c8-6392-42a7-a631-b236f4c7035f", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c10af8e-c523-41c8-90fb-3a4205757537", "record_id": "flaws_cloudtrail:0000343:0c10af8e-c523-41c8-90fb-3a4205757537", "row_index": 343, "timestamp": "2018-07-29T15:29:44Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c10af8e-c523-41c8-90fb-3a4205757537", "eventTime": "2018-07-29T15:29:44Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0144b461-e531-4bdc-90f2-b8e10f441c2d", "record_id": "flaws_cloudtrail:0000344:0144b461-e531-4bdc-90f2-b8e10f441c2d", "row_index": 344, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0144b461-e531-4bdc-90f2-b8e10f441c2d", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51e5bd4c-5580-4abd-99d7-dc4ae52cc7a8", "record_id": "flaws_cloudtrail:0000345:51e5bd4c-5580-4abd-99d7-dc4ae52cc7a8", "row_index": 345, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51e5bd4c-5580-4abd-99d7-dc4ae52cc7a8", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b51402-b2e3-45da-bdd5-aa8054c7b673", "record_id": "flaws_cloudtrail:0000346:2b51402-b2e3-45da-bdd5-aa8054c7b673", "row_index": 346, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b51402-b2e3-45da-bdd5-aa8054c7b673", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f47cf10-4a81-42b8-97ad-adc84c4092af", "record_id": "flaws_cloudtrail:0000347:3f47cf10-4a81-42b8-97ad-adc84c4092af", "row_index": 347, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f47cf10-4a81-42b8-97ad-adc84c4092af", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aacc16aa-d05f-4fb2-be65-ef81fba94f3c", "record_id": "flaws_cloudtrail:0000348:aacc16aa-d05f-4fb2-be65-ef81fba94f3c", "row_index": 348, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aacc16aa-d05f-4fb2-be65-ef81fba94f3c", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b07d213-9483-4a98-8753-9406df646fa2", "record_id": "flaws_cloudtrail:0000349:5b07d213-9483-4a98-8753-9406df646fa2", "row_index": 349, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b07d213-9483-4a98-8753-9406df646fa2", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9d19f7a-aaed-4716-b44d-161410e35b2d", "record_id": "flaws_cloudtrail:0000350:b9d19f7a-aaed-4716-b44d-161410e35b2d", "row_index": 350, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9d19f7a-aaed-4716-b44d-161410e35b2d", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db04b8af-607f-46c1-8a62-4484eebe04ca", "record_id": "flaws_cloudtrail:0000351:db04b8af-607f-46c1-8a62-4484eebe04ca", "row_index": 351, "timestamp": "2018-07-29T15:29:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db04b8af-607f-46c1-8a62-4484eebe04ca", "eventTime": "2018-07-29T15:29:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c932eb36-cbdc-475f-92ef-aad2ed213b55", "record_id": "flaws_cloudtrail:0000352:c932eb36-cbdc-475f-92ef-aad2ed213b55", "row_index": 352, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c932eb36-cbdc-475f-92ef-aad2ed213b55", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "476325c6-97b0-4f0d-a32b-5701520cea30", "record_id": "flaws_cloudtrail:0000353:476325c6-97b0-4f0d-a32b-5701520cea30", "row_index": 353, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "476325c6-97b0-4f0d-a32b-5701520cea30", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40bce3de-0a4f-4380-a86f-0d71b6e1d085", "record_id": "flaws_cloudtrail:0000354:40bce3de-0a4f-4380-a86f-0d71b6e1d085", "row_index": 354, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40bce3de-0a4f-4380-a86f-0d71b6e1d085", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49e9a678-4d94-495d-ae27-2b74623c39", "record_id": "flaws_cloudtrail:0000355:49e9a678-4d94-495d-ae27-2b74623c39", "row_index": 355, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49e9a678-4d94-495d-ae27-2b74623c39", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe8246a-f25a-4950-a60d-0ea7b00a3b96", "record_id": "flaws_cloudtrail:0000356:3fe8246a-f25a-4950-a60d-0ea7b00a3b96", "row_index": 356, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe8246a-f25a-4950-a60d-0ea7b00a3b96", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8baa3bc2-8a80-4d2a-b015-a2aa8cc1fd43", "record_id": "flaws_cloudtrail:0000357:8baa3bc2-8a80-4d2a-b015-a2aa8cc1fd43", "row_index": 357, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8baa3bc2-8a80-4d2a-b015-a2aa8cc1fd43", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7c1c0ca-6104-44f9-94e3-597b48e15b24", "record_id": "flaws_cloudtrail:0000358:d7c1c0ca-6104-44f9-94e3-597b48e15b24", "row_index": 358, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7c1c0ca-6104-44f9-94e3-597b48e15b24", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0e5945-1b6d-4209-8943-5d17275df8e", "record_id": "flaws_cloudtrail:0000359:8a0e5945-1b6d-4209-8943-5d17275df8e", "row_index": 359, "timestamp": "2018-07-29T15:29:48Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0e5945-1b6d-4209-8943-5d17275df8e", "eventTime": "2018-07-29T15:29:48Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37704-e1bd-4e9c-b91e-0cbf473536da", "record_id": "flaws_cloudtrail:0000360:f37704-e1bd-4e9c-b91e-0cbf473536da", "row_index": 360, "timestamp": "2018-07-29T15:29:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37704-e1bd-4e9c-b91e-0cbf473536da", "eventTime": "2018-07-29T15:29:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9aadb8a-a907-42e1-8388-34ddea608b22", "record_id": "flaws_cloudtrail:0000361:f9aadb8a-a907-42e1-8388-34ddea608b22", "row_index": 361, "timestamp": "2018-07-29T15:29:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9aadb8a-a907-42e1-8388-34ddea608b22", "eventTime": "2018-07-29T15:29:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17ab00a7-abc9-48c3-a388-035fc15e8c25", "record_id": "flaws_cloudtrail:0000362:17ab00a7-abc9-48c3-a388-035fc15e8c25", "row_index": 362, "timestamp": "2018-07-29T15:29:50Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17ab00a7-abc9-48c3-a388-035fc15e8c25", "eventTime": "2018-07-29T15:29:50Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e14656-e1bc-4adb-a387-896f71dd00a5", "record_id": "flaws_cloudtrail:0000363:56e14656-e1bc-4adb-a387-896f71dd00a5", "row_index": 363, "timestamp": "2018-07-29T15:29:51Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e14656-e1bc-4adb-a387-896f71dd00a5", "eventTime": "2018-07-29T15:29:51Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ed29b0-c688-4041-9aac-88d6ef335d77", "record_id": "flaws_cloudtrail:0000364:59ed29b0-c688-4041-9aac-88d6ef335d77", "row_index": 364, "timestamp": "2018-07-29T15:29:51Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ed29b0-c688-4041-9aac-88d6ef335d77", "eventTime": "2018-07-29T15:29:51Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b175e74-1791-42de-9f29-c3e7ceb121ee", "record_id": "flaws_cloudtrail:0000365:1b175e74-1791-42de-9f29-c3e7ceb121ee", "row_index": 365, "timestamp": "2018-07-29T15:29:51Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b175e74-1791-42de-9f29-c3e7ceb121ee", "eventTime": "2018-07-29T15:29:51Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "987ce31b-ec41-4e33-8a6a-075bbc3af4b0", "record_id": "flaws_cloudtrail:0000366:987ce31b-ec41-4e33-8a6a-075bbc3af4b0", "row_index": 366, "timestamp": "2018-07-29T15:29:51Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "987ce31b-ec41-4e33-8a6a-075bbc3af4b0", "eventTime": "2018-07-29T15:29:51Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9703a8ba-9fd9-496e-8ce3-e1d560727cb0f", "record_id": "flaws_cloudtrail:0000367:9703a8ba-9fd9-496e-8ce3-e1d560727cb0f", "row_index": 367, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9703a8ba-9fd9-496e-8ce3-e1d560727cb0f", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac03a7fe-eb72-43f8-b665-33be5f8918a1", "record_id": "flaws_cloudtrail:0000368:ac03a7fe-eb72-43f8-b665-33be5f8918a1", "row_index": 368, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac03a7fe-eb72-43f8-b665-33be5f8918a1", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86af25ee-925c-4b45-9461-8a62681e3df", "record_id": "flaws_cloudtrail:0000369:86af25ee-925c-4b45-9461-8a62681e3df", "row_index": 369, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86af25ee-925c-4b45-9461-8a62681e3df", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8dcf5de-8c49-46e2-8016-599025ab3", "record_id": "flaws_cloudtrail:0000370:a8dcf5de-8c49-46e2-8016-599025ab3", "row_index": 370, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8dcf5de-8c49-46e2-8016-599025ab3", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90875a7-bff0-4f93-9825-5cd42fded39c", "record_id": "flaws_cloudtrail:0000371:90875a7-bff0-4f93-9825-5cd42fded39c", "row_index": 371, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90875a7-bff0-4f93-9825-5cd42fded39c", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f48a758b-6aa4-4742-9e2b-2edb7e67ddd5", "record_id": "flaws_cloudtrail:0000372:f48a758b-6aa4-4742-9e2b-2edb7e67ddd5", "row_index": 372, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f48a758b-6aa4-4742-9e2b-2edb7e67ddd5", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebd4ece-66fc-4b8f-a945-cd9b89d13480", "record_id": "flaws_cloudtrail:0000373:8ebd4ece-66fc-4b8f-a945-cd9b89d13480", "row_index": 373, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebd4ece-66fc-4b8f-a945-cd9b89d13480", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b7c9dc8-41bb-4dd5-9e69-611b031016", "record_id": "flaws_cloudtrail:0000374:0b7c9dc8-41bb-4dd5-9e69-611b031016", "row_index": 374, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b7c9dc8-41bb-4dd5-9e69-611b031016", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b037d946-0a97-43be-8c6e-83941a86794e", "record_id": "flaws_cloudtrail:0000375:b037d946-0a97-43be-8c6e-83941a86794e", "row_index": 375, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b037d946-0a97-43be-8c6e-83941a86794e", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa735d8-887d-48db-850a-bacbce3f0098", "record_id": "flaws_cloudtrail:0000376:0aa735d8-887d-48db-850a-bacbce3f0098", "row_index": 376, "timestamp": "2018-07-29T15:29:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa735d8-887d-48db-850a-bacbce3f0098", "eventTime": "2018-07-29T15:29:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dadfbe8-4298-4ff6-9a63-4067f05266", "record_id": "flaws_cloudtrail:0000377:6dadfbe8-4298-4ff6-9a63-4067f05266", "row_index": 377, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dadfbe8-4298-4ff6-9a63-4067f05266", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ef2f6f-2508-4770-a420-393ee0dee36c", "record_id": "flaws_cloudtrail:0000378:86ef2f6f-2508-4770-a420-393ee0dee36c", "row_index": 378, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ef2f6f-2508-4770-a420-393ee0dee36c", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bf96b36-b8e3-4bce-aa29-9026e92155", "record_id": "flaws_cloudtrail:0000379:0bf96b36-b8e3-4bce-aa29-9026e92155", "row_index": 379, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bf96b36-b8e3-4bce-aa29-9026e92155", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06539d-4954-4f58-a0e2-bf56dc09785", "record_id": "flaws_cloudtrail:0000380:06539d-4954-4f58-a0e2-bf56dc09785", "row_index": 380, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06539d-4954-4f58-a0e2-bf56dc09785", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988553a14-abae-474a-bc67-615c4fa6ab25", "record_id": "flaws_cloudtrail:0000381:988553a14-abae-474a-bc67-615c4fa6ab25", "row_index": 381, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988553a14-abae-474a-bc67-615c4fa6ab25", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c29ad34-b1c2-4151-9080-8737c34be445", "record_id": "flaws_cloudtrail:0000382:1c29ad34-b1c2-4151-9080-8737c34be445", "row_index": 382, "timestamp": "2018-07-29T15:29:53Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c29ad34-b1c2-4151-9080-8737c34be445", "eventTime": "2018-07-29T15:29:53Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4ce90a8-ca1d-4808-82ee-cd813cdab120", "record_id": "flaws_cloudtrail:0000383:c4ce90a8-ca1d-4808-82ee-cd813cdab120", "row_index": 383, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4ce90a8-ca1d-4808-82ee-cd813cdab120", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df6f4a5-5820-488e-a7bc-834093029a2e", "record_id": "flaws_cloudtrail:0000384:7df6f4a5-5820-488e-a7bc-834093029a2e", "row_index": 384, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df6f4a5-5820-488e-a7bc-834093029a2e", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "234a4746-87a9-4d1b-b780-49e4ecffdd7a", "record_id": "flaws_cloudtrail:0000385:234a4746-87a9-4d1b-b780-49e4ecffdd7a", "row_index": 385, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "234a4746-87a9-4d1b-b780-49e4ecffdd7a", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d57b64a3-8606-4a5f-982d-2e0580e9f2c9", "record_id": "flaws_cloudtrail:0000386:d57b64a3-8606-4a5f-982d-2e0580e9f2c9", "row_index": 386, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d57b64a3-8606-4a5f-982d-2e0580e9f2c9", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f2f5e4-2865-40ee-b647-b465051d412d5", "record_id": "flaws_cloudtrail:0000387:52f2f5e4-2865-40ee-b647-b465051d412d5", "row_index": 387, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f2f5e4-2865-40ee-b647-b465051d412d5", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f91e3bff-f375-4ca3-97fd-544c581adcef", "record_id": "flaws_cloudtrail:0000388:f91e3bff-f375-4ca3-97fd-544c581adcef", "row_index": 388, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f91e3bff-f375-4ca3-97fd-544c581adcef", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a22fd03-942f-4b95-9615-92a771b20718", "record_id": "flaws_cloudtrail:0000389:7a22fd03-942f-4b95-9615-92a771b20718", "row_index": 389, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a22fd03-942f-4b95-9615-92a771b20718", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35119cc-12f4-418a-a658-340d6d1bf10c", "record_id": "flaws_cloudtrail:0000390:35119cc-12f4-418a-a658-340d6d1bf10c", "row_index": 390, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35119cc-12f4-418a-a658-340d6d1bf10c", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268fa507-6db6-4b59-9cc3-09c7c975af04", "record_id": "flaws_cloudtrail:0000391:268fa507-6db6-4b59-9cc3-09c7c975af04", "row_index": 391, "timestamp": "2018-07-29T15:29:54Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268fa507-6db6-4b59-9cc3-09c7c975af04", "eventTime": "2018-07-29T15:29:54Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032482-954f-4d01-8e58-2b5dfdae965b", "record_id": "flaws_cloudtrail:0000392:032482-954f-4d01-8e58-2b5dfdae965b", "row_index": 392, "timestamp": "2018-07-29T15:29:55Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032482-954f-4d01-8e58-2b5dfdae965b", "eventTime": "2018-07-29T15:29:55Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34df446b-1283-425f-a0ce-31495a9dbf50", "record_id": "flaws_cloudtrail:0000393:34df446b-1283-425f-a0ce-31495a9dbf50", "row_index": 393, "timestamp": "2018-07-29T15:29:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34df446b-1283-425f-a0ce-31495a9dbf50", "eventTime": "2018-07-29T15:29:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "Boto3/1.7.65 Python/2.7.13 Windows/10 Botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d9cc4b8-49d2-4463-96b5-faeee943b2a4", "record_id": "flaws_cloudtrail:0000394:1d9cc4b8-49d2-4463-96b5-faeee943b2a4", "row_index": 394, "timestamp": "2018-07-29T16:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d9cc4b8-49d2-4463-96b5-faeee943b2a4", "eventTime": "2018-07-29T16:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO45J79FM8GVQ5GWS", "expiration": "Jul 29, 2018 10:39:35 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30bbfd5-91fd-42c9-b230-e42e449a494f", "record_id": "flaws_cloudtrail:0000395:e30bbfd5-91fd-42c9-b230-e42e449a494f", "row_index": 395, "timestamp": "2018-07-29T16:28:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.244.3.119", "user_agent": "aws-cli/1.15.66 Python/2.7.15 Linux/4.4.0-53329-Microsoft botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30bbfd5-91fd-42c9-b230-e42e449a494f", "eventTime": "2018-07-29T16:28:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.244.3.119", "userAgent": "aws-cli/1.15.66 Python/2.7.15 Linux/4.4.0-53329-Microsoft botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b695f0ce-9a79-4dc9-9a88-d42174ef9881", "record_id": "flaws_cloudtrail:0000396:b695f0ce-9a79-4dc9-9a88-d42174ef9881", "row_index": 396, "timestamp": "2018-07-29T17:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b695f0ce-9a79-4dc9-9a88-d42174ef9881", "eventTime": "2018-07-29T17:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV47IPKLQTUXW78FP", "expiration": "Jul 29, 2018 11:15:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90bbd08a-949d-4bd2-821c-2c8bdc7bf899", "record_id": "flaws_cloudtrail:0000397:90bbd08a-949d-4bd2-821c-2c8bdc7bf899", "row_index": 397, "timestamp": "2018-07-29T17:42:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90bbd08a-949d-4bd2-821c-2c8bdc7bf899", "eventTime": "2018-07-29T17:42:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6M701U7GWOPGB4CY", "expiration": "Jul 29, 2018 6:42:54 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aefef72-8f95-4b72-a92e-42ac40001d71", "record_id": "flaws_cloudtrail:0000398:6aefef72-8f95-4b72-a92e-42ac40001d71", "row_index": 398, "timestamp": "2018-07-29T18:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aefef72-8f95-4b72-a92e-42ac40001d71", "eventTime": "2018-07-29T18:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMCTCTB33PMYSITBL", "expiration": "Jul 30, 2018 12:35:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f363846b2-84c6-4a65-83af-f9e539d206d4", "record_id": "flaws_cloudtrail:0000399:f363846b2-84c6-4a65-83af-f9e539d206d4", "row_index": 399, "timestamp": "2018-07-29T19:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f363846b2-84c6-4a65-83af-f9e539d206d4", "eventTime": "2018-07-29T19:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT5E2P2AD5UWU6K3M", "expiration": "Jul 30, 2018 1:26:34 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddababb-9405-4a10-85f5-ca3b684b4fc5", "record_id": "flaws_cloudtrail:0000400:3ddababb-9405-4a10-85f5-ca3b684b4fc5", "row_index": 400, "timestamp": "2018-07-29T20:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddababb-9405-4a10-85f5-ca3b684b4fc5", "eventTime": "2018-07-29T20:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7GUV9A0QMM52JJ5F", "expiration": "Jul 30, 2018 2:38:53 AM", "sessionToken": "FQoDYXdzEPX//////////wEaDPRw6kM4OdBDwS1e/SK3AxZf1jB8w+VBgD4J9svEjRzPztFXnV95J04VxqV6entwj8/n9X35XP0Yb8hbCer8vQQJa+29GElWJLuYZ2/STR5GXEgBuZ1RIE0zYd/Pyq6QSqmS1tyX1cfqdVjJ8XMbi5zv7G7/WdPKutvYDluni/KbeeTMBUMWX1XKPv6gLCwdr9AoB/QMxmjsiNfFABrJ9Tujk2tjATid1N/Hb+1+kYL0S1cDvfRs1vRbW9202+DgOIvLzKHKRSH/Zc8YECbmF0LT9lmpRSwQG3tgMACFBLLZisIFmaLAUYAGfDQaOWLj5uel6ke1Yqg1XFKV8C96JMrb/FoOkSBMhHH4HbjVOL5cwJ18WcgsHTSxczGZG3mM6rWUEIWL5e67KepUuUpLJQvJio8UmDBGAOPezZ9bNt+lGkeFtXkNcJsjZE4HCXW2f1gmvTlhi//Db+WstD7Nx9ofHpELcM/DjxHlpgrJW5TT5klk7em1ILw6cbQh9VkWF3v+9rDnOERSe4idPZyh5z1bvhelJfTL3vXX9scGqhikIKnM9OXRTqsKw7duuB86my4TbwoG+DH3QO65jBA/YtPG7ifuDQYogb/42gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff51039-2df9-4978-ae6b-e2728becb25c", "record_id": "flaws_cloudtrail:0000401:ff51039-2df9-4978-ae6b-e2728becb25c", "row_index": 401, "timestamp": "2018-07-29T21:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1489, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff51039-2df9-4978-ae6b-e2728becb25c", "eventTime": "2018-07-29T21:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARBV2M5NTLJ2NKODM", "expiration": "Jul 30, 2018 3:33:24 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e85350e-6392-4c6a-9fac-27305c9068a5", "record_id": "flaws_cloudtrail:0000402:0e85350e-6392-4c6a-9fac-27305c9068a5", "row_index": 402, "timestamp": "2018-07-29T22:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e85350e-6392-4c6a-9fac-27305c9068a5", "eventTime": "2018-07-29T22:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZLADMJ4KE62CGS8B", "expiration": "Jul 30, 2018 4:24:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0206eae-5c16-474d-a458-8c2206d4602c", "record_id": "flaws_cloudtrail:0000403:e0206eae-5c16-474d-a458-8c2206d4602c", "row_index": 403, "timestamp": "2018-07-29T22:14:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1227, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0206eae-5c16-474d-a458-8c2206d4602c", "eventTime": "2018-07-29T22:14:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIABPAHXZIKALMFQ18Z", "expiration": "Jul 30, 2018 10:14:08 AM", "sessionToken": "FQoDYXdzEPf//////////wEaDMoJyjZ/wniCLd1DqyLfAYR7Isetk3XAOr6gAyQLrou+RT68HfiZeRtUN6VI30NHB08hAeN0nPVngubWYXb/FyLTQXeU2Y5ZImJL2OvJ/mIKGBVl3cyea2Osq8l9QxaItf0fYqixloAi093y5HMFWDzWpM+2fqIcAJUoIbzWa4mtQ6aOXAiE1NnO+L4t3AlGFMcjVuv3o+JsMEfzwma/c5b3ymusycdoxOXEx2XDRnf436zGjd4QoY/la5sELTNjF4FkpKxupNbENXF9SLvJ+vH9lnAMsFdGHY3JIASA8p/Cwa1CcF4IFhhRxZdaaoAosPj42gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346bd681-7dd6-415d-ad86-3a5d4f54aa73", "record_id": "flaws_cloudtrail:0000404:346bd681-7dd6-415d-ad86-3a5d4f54aa73", "row_index": 404, "timestamp": "2018-07-29T22:14:09Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIABPAHXZIKALMFQ18Z", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "65.255.252.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346bd681-7dd6-415d-ad86-3a5d4f54aa73", "eventTime": "2018-07-29T22:14:09Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "65.255.252.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIABPAHXZIKALMFQ18Z", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T22:14:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2018/07/29/[$LATEST]32d4cc59f35fabb2701d128436c8c35d"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd961a88-967f-4dff-ae5f-23d7b0962d4a", "record_id": "flaws_cloudtrail:0000405:fd961a88-967f-4dff-ae5f-23d7b0962d4a", "row_index": 405, "timestamp": "2018-07-29T22:52:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIABPAHXZIKALMFQ18Z", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "245.7.9.4", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd961a88-967f-4dff-ae5f-23d7b0962d4a", "eventTime": "2018-07-29T22:52:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "245.7.9.4", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIABPAHXZIKALMFQ18Z", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-07-29T22:14:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2018/07/29/[$LATEST]12b49c0663e63a646e321713d5768486", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e28c49-d733-4406-b4c9-127b95714", "record_id": "flaws_cloudtrail:0000406:38e28c49-d733-4406-b4c9-127b95714", "row_index": 406, "timestamp": "2018-07-29T23:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1488, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e28c49-d733-4406-b4c9-127b95714", "eventTime": "2018-07-29T23:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE8XNCRYM8DNCGFQE", "expiration": "Jul 30, 2018 5:13:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966ccd01-619e-4e2a-893a-5c3bc5d6fd58", "record_id": "flaws_cloudtrail:0000407:966ccd01-619e-4e2a-893a-5c3bc5d6fd58", "row_index": 407, "timestamp": "2018-07-29T23:42:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1938, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966ccd01-619e-4e2a-893a-5c3bc5d6fd58", "eventTime": "2018-07-29T23:42:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPCOG38UUV89F7O44", "expiration": "Jul 30, 2018 12:42:55 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ebd0486-ca02-42d4-befd-5f7cdb6211db", "record_id": "flaws_cloudtrail:0000408:7ebd0486-ca02-42d4-befd-5f7cdb6211db", "row_index": 408, "timestamp": "2018-07-30T00:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ebd0486-ca02-42d4-befd-5f7cdb6211db", "eventTime": "2018-07-30T00:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMUSNASTU6EOE06MO", "expiration": "Jul 30, 2018 6:26:57 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c17161f-f4f3-46f8-b34d-d3b0697015c5", "record_id": "flaws_cloudtrail:0000409:1c17161f-f4f3-46f8-b34d-d3b0697015c5", "row_index": 409, "timestamp": "2018-07-30T01:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c17161f-f4f3-46f8-b34d-d3b0697015c5", "eventTime": "2018-07-30T01:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADI9PJ28SXZV7TB9P", "expiration": "Jul 30, 2018 7:41:55 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a787b95-1053-4bc1-8638-56e56041b0d", "record_id": "flaws_cloudtrail:0000410:5a787b95-1053-4bc1-8638-56e56041b0d", "row_index": 410, "timestamp": "2018-07-30T02:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1489, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a787b95-1053-4bc1-8638-56e56041b0d", "eventTime": "2018-07-30T02:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIKXVTLKDUX3MGTOJ", "expiration": "Jul 30, 2018 8:34:59 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa31d870-eba0-4982-8109-901fe554ec53", "record_id": "flaws_cloudtrail:0000411:aa31d870-eba0-4982-8109-901fe554ec53", "row_index": 411, "timestamp": "2018-07-30T03:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa31d870-eba0-4982-8109-901fe554ec53", "eventTime": "2018-07-30T03:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWVRC4AFOQP0CXNDV", "expiration": "Jul 30, 2018 9:40:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd3ed34f-b415-4c21-a9d0-59b6fedceae3", "record_id": "flaws_cloudtrail:0000412:cd3ed34f-b415-4c21-a9d0-59b6fedceae3", "row_index": 412, "timestamp": "2018-07-30T04:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1489, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd3ed34f-b415-4c21-a9d0-59b6fedceae3", "eventTime": "2018-07-30T04:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0DQE5HTNVI7F68WD", "expiration": "Jul 30, 2018 10:12:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9757a5c9-f462-473b-8b6b-46e694cea4e8", "record_id": "flaws_cloudtrail:0000413:9757a5c9-f462-473b-8b6b-46e694cea4e8", "row_index": 413, "timestamp": "2018-07-30T05:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9757a5c9-f462-473b-8b6b-46e694cea4e8", "eventTime": "2018-07-30T05:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT0LYFA2KI1XQQNC6", "expiration": "Jul 30, 2018 11:20:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e861984-7234-4663-8022-a4596fc30a13", "record_id": "flaws_cloudtrail:0000414:18e861984-7234-4663-8022-a4596fc30a13", "row_index": 414, "timestamp": "2018-07-30T05:43:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e861984-7234-4663-8022-a4596fc30a13", "eventTime": "2018-07-30T05:43:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIABLTNC6JX2YJUH589", "expiration": "Jul 30, 2018 6:43:03 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72c03f3-dedb-40e1-b9d6-6707e2a5f11e", "record_id": "flaws_cloudtrail:0000415:d72c03f3-dedb-40e1-b9d6-6707e2a5f11e", "row_index": 415, "timestamp": "2018-07-30T06:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1489, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72c03f3-dedb-40e1-b9d6-6707e2a5f11e", "eventTime": "2018-07-30T06:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO2OHDJ9OIXX6YI17", "expiration": "Jul 30, 2018 12:33:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b2b7a7-0677-4042-8851-cc68d4c284db", "record_id": "flaws_cloudtrail:0000416:c4b2b7a7-0677-4042-8851-cc68d4c284db", "row_index": 416, "timestamp": "2018-07-30T07:11:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b2b7a7-0677-4042-8851-cc68d4c284db", "eventTime": "2018-07-30T07:11:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3X042ZD30W7OP08K", "expiration": "Jul 30, 2018 1:30:47 PM", "sessionToken": "FQoDYXdzEBAaDII16RaOLz1sNBY0viK3A4RjXszzHGTit6xVl156LEQnNsvP+Zs7gE9T77pDLEmxdek+5KORfW8WTtLjloyhofQ6Dkc7TIODYlUK+VWUgEGekqFFH37K4LjUs5xPyuv1wM/aa6oHz8w5twpVrgm6ZiDiJvY71ulALzY8SAKtlyywKXPVK9PwOVC7H7ScFMlnF8igDN1ZqtkWXi6B221DcOGZ5aEyRpQaRVyLsqDpiKWv5p/g0N8mxNtxghNue1wdh1kHiC5b4MUCuQMX1YPKXlDllyIZqjsXQFYdKUwoSE+37o6yCrnVmR9nTRT59OHmjPVNqHfHBVzgMX/795buyxCcdo5QGv0qE7G1DtDowp9+CezpHoJmOtRGU/Hd00huk8PsFyDSXUfz/jCOrGLzpBz1Z9Fk8EtRy7893UF9cMzep00+fv3riZOybi9FQWmbOwoqynkI2hCb4+eZatrzE8bqOJC7/AM2in5Rv+mjdtthp8cX+9TgCKG8Fi92Zaa97i6DcWSRyXvZlyaQpORG8Nix9XS7cgD18exM4lXSU0QcvxmeXoRd6KM5cGrbe0lrh8lodnyYQ4rHl93T/HTXz42Zn2Bsz0oosfT62gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1531eeff-e0d2-4a07-a249-d2cff7ca1154", "record_id": "flaws_cloudtrail:0000417:1531eeff-e0d2-4a07-a249-d2cff7ca1154", "row_index": 417, "timestamp": "2018-07-30T08:04:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1531eeff-e0d2-4a07-a249-d2cff7ca1154", "eventTime": "2018-07-30T08:04:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "702836-47de-4aa6-899a-af01077ede36", "record_id": "flaws_cloudtrail:0000418:702836-47de-4aa6-899a-af01077ede36", "row_index": 418, "timestamp": "2018-07-30T08:04:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "702836-47de-4aa6-899a-af01077ede36", "eventTime": "2018-07-30T08:04:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81123fac-9346-4f1d-ac82-e7894e2b018d", "record_id": "flaws_cloudtrail:0000419:81123fac-9346-4f1d-ac82-e7894e2b018d", "row_index": 419, "timestamp": "2018-07-30T08:04:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81123fac-9346-4f1d-ac82-e7894e2b018d", "eventTime": "2018-07-30T08:04:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-example-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea98357-7f1a-4279-b9f1-84e0ba8b2c7d", "record_id": "flaws_cloudtrail:0000420:bea98357-7f1a-4279-b9f1-84e0ba8b2c7d", "row_index": 420, "timestamp": "2018-07-30T08:05:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 505, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea98357-7f1a-4279-b9f1-84e0ba8b2c7d", "eventTime": "2018-07-30T08:05:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467e3eb8-3591-40ac-a6d3-989b1a5c9de4", "record_id": "flaws_cloudtrail:0000421:467e3eb8-3591-40ac-a6d3-989b1a5c9de4", "row_index": 421, "timestamp": "2018-07-30T08:06:21Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467e3eb8-3591-40ac-a6d3-989b1a5c9de4", "eventTime": "2018-07-30T08:06:21Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a97b2d3f-75ce-4d48-b8f8-85609f11628", "record_id": "flaws_cloudtrail:0000422:a97b2d3f-75ce-4d48-b8f8-85609f11628", "row_index": 422, "timestamp": "2018-07-30T08:06:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a97b2d3f-75ce-4d48-b8f8-85609f11628", "eventTime": "2018-07-30T08:06:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166ca4c8-0964-4b6b-8324-4dd54ab107d0", "record_id": "flaws_cloudtrail:0000423:166ca4c8-0964-4b6b-8324-4dd54ab107d0", "row_index": 423, "timestamp": "2018-07-30T08:06:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166ca4c8-0964-4b6b-8324-4dd54ab107d0", "eventTime": "2018-07-30T08:06:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-example-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "674b84eb-cb76-40ec-8f73-23c6c30367", "record_id": "flaws_cloudtrail:0000424:674b84eb-cb76-40ec-8f73-23c6c30367", "row_index": 424, "timestamp": "2018-07-30T08:07:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "674b84eb-cb76-40ec-8f73-23c6c30367", "eventTime": "2018-07-30T08:07:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-prod-accesslog-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8ad9d1c-8243-49e2-8207-0110fdc875fe", "record_id": "flaws_cloudtrail:0000425:d8ad9d1c-8243-49e2-8207-0110fdc875fe", "row_index": 425, "timestamp": "2018-07-30T08:07:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8ad9d1c-8243-49e2-8207-0110fdc875fe", "eventTime": "2018-07-30T08:07:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-tmp-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6922e32-ecfe-43ed-af3b-3ebd2cfc2243", "record_id": "flaws_cloudtrail:0000426:b6922e32-ecfe-43ed-af3b-3ebd2cfc2243", "row_index": 426, "timestamp": "2018-07-30T08:07:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6922e32-ecfe-43ed-af3b-3ebd2cfc2243", "eventTime": "2018-07-30T08:07:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.13.0-37-generic botocore/1.10.65", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb4f880-7da6-4f06-a6ff-87e29de77c2b", "record_id": "flaws_cloudtrail:0000427:ffb4f880-7da6-4f06-a6ff-87e29de77c2b", "row_index": 427, "timestamp": "2018-07-30T08:07:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb4f880-7da6-4f06-a6ff-87e29de77c2b", "eventTime": "2018-07-30T08:07:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-example-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e261bd5-8270-4e23-8c36-c0d69736d9c", "record_id": "flaws_cloudtrail:0000428:3e261bd5-8270-4e23-8c36-c0d69736d9c", "row_index": 428, "timestamp": "2018-07-30T08:07:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e261bd5-8270-4e23-8c36-c0d69736d9c", "eventTime": "2018-07-30T08:07:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-prod-accesslog-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5ae95e2-75b2-4a15-be07-0eca3d1aaeae", "record_id": "flaws_cloudtrail:0000429:c5ae95e2-75b2-4a15-be07-0eca3d1aaeae", "row_index": 429, "timestamp": "2018-07-30T08:07:20Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5ae95e2-75b2-4a15-be07-0eca3d1aaeae", "eventTime": "2018-07-30T08:07:20Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f89a62-a9a7-4d20-9ef6-3747c44a6707", "record_id": "flaws_cloudtrail:0000430:53f89a62-a9a7-4d20-9ef6-3747c44a6707", "row_index": 430, "timestamp": "2018-07-30T08:07:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f89a62-a9a7-4d20-9ef6-3747c44a6707", "eventTime": "2018-07-30T08:07:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ai-camp-tmp-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fd639834-b838-45ee-877e-a407d3c72d7b", "record_id": "flaws_cloudtrail:0000431:8fd639834-b838-45ee-877e-a407d3c72d7b", "row_index": 431, "timestamp": "2018-07-30T08:07:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fd639834-b838-45ee-877e-a407d3c72d7b", "eventTime": "2018-07-30T08:07:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-32c94536bea1-eu-central-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f84e14f-90a5-4a71-a927-9e66320", "record_id": "flaws_cloudtrail:0000432:0f84e14f-90a5-4a71-a927-9e66320", "row_index": 432, "timestamp": "2018-07-30T08:07:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f84e14f-90a5-4a71-a927-9e66320", "eventTime": "2018-07-30T08:07:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-32c94536bea1-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5bd7da4-f828-4c22-a3ad-915a3c47906f", "record_id": "flaws_cloudtrail:0000433:e5bd7da4-f828-4c22-a3ad-915a3c47906f", "row_index": 433, "timestamp": "2018-07-30T08:07:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5bd7da4-f828-4c22-a3ad-915a3c47906f", "eventTime": "2018-07-30T08:07:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-32c94536bea1-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19b949e7-9c4c-41d4-a8d6-1282d538ee56", "record_id": "flaws_cloudtrail:0000434:19b949e7-9c4c-41d4-a8d6-1282d538ee56", "row_index": 434, "timestamp": "2018-07-30T08:07:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19b949e7-9c4c-41d4-a8d6-1282d538ee56", "eventTime": "2018-07-30T08:07:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-32c94536bea1-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4e11d8d-e83a-479d-9622-bb6e19fb2169", "record_id": "flaws_cloudtrail:0000435:b4e11d8d-e83a-479d-9622-bb6e19fb2169", "row_index": 435, "timestamp": "2018-07-30T08:07:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4e11d8d-e83a-479d-9622-bb6e19fb2169", "eventTime": "2018-07-30T08:07:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cloudtrail-trendmicro-b09098617d95-global", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bea9315-6d4a-4fcc-be4d-30851f1fd863", "record_id": "flaws_cloudtrail:0000436:0bea9315-6d4a-4fcc-be4d-30851f1fd863", "row_index": 436, "timestamp": "2018-07-30T08:07:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bea9315-6d4a-4fcc-be4d-30851f1fd863", "eventTime": "2018-07-30T08:07:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "datalake-aicamp-aws-log-prod-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af831f98-1536-4972-8ab4-9e58e157a89f", "record_id": "flaws_cloudtrail:0000437:af831f98-1536-4972-8ab4-9e58e157a89f", "row_index": 437, "timestamp": "2018-07-30T08:07:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af831f98-1536-4972-8ab4-9e58e157a89f", "eventTime": "2018-07-30T08:07:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "datalake-aicamp-aws-prod-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47499-cee2-48a9-a82c-144af104352f", "record_id": "flaws_cloudtrail:0000438:47499-cee2-48a9-a82c-144af104352f", "row_index": 438, "timestamp": "2018-07-30T08:07:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47499-cee2-48a9-a82c-144af104352f", "eventTime": "2018-07-30T08:07:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "datalake-aicamp-service-prod-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4591a223-9ae3-4b22-b3c8-4b0b8921ca42", "record_id": "flaws_cloudtrail:0000439:4591a223-9ae3-4b22-b3c8-4b0b8921ca42", "row_index": 439, "timestamp": "2018-07-30T08:07:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4591a223-9ae3-4b22-b3c8-4b0b8921ca42", "eventTime": "2018-07-30T08:07:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "activemalware", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8af0af-cd23-45be-95c2-8676ca251772", "record_id": "flaws_cloudtrail:0000440:aa8af0af-cd23-45be-95c2-8676ca251772", "row_index": 440, "timestamp": "2018-07-30T08:07:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8af0af-cd23-45be-95c2-8676ca251772", "eventTime": "2018-07-30T08:07:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "activemalware-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8c35cf-eb04-4894-b0f7-8430b873f128", "record_id": "flaws_cloudtrail:0000441:ad8c35cf-eb04-4894-b0f7-8430b873f128", "row_index": 441, "timestamp": "2018-07-30T08:07:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8c35cf-eb04-4894-b0f7-8430b873f128", "eventTime": "2018-07-30T08:07:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "activemalware-dv-s3bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca04c0d2-c96d-42e0-9e9c-7af8582636be", "record_id": "flaws_cloudtrail:0000442:ca04c0d2-c96d-42e0-9e9c-7af8582636be", "row_index": 442, "timestamp": "2018-07-30T08:07:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca04c0d2-c96d-42e0-9e9c-7af8582636be", "eventTime": "2018-07-30T08:07:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "activemalware-hw", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035878a4-0d62-4236-b6dc-343f01c93a42", "record_id": "flaws_cloudtrail:0000443:035878a4-0d62-4236-b6dc-343f01c93a42", "row_index": 443, "timestamp": "2018-07-30T08:07:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035878a4-0d62-4236-b6dc-343f01c93a42", "eventTime": "2018-07-30T08:07:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-logs-7b58ef6705b7-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e2a17e9-6ade-47f9-adb8-7c9b874391d69", "record_id": "flaws_cloudtrail:0000444:4e2a17e9-6ade-47f9-adb8-7c9b874391d69", "row_index": 444, "timestamp": "2018-07-30T08:07:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e2a17e9-6ade-47f9-adb8-7c9b874391d69", "eventTime": "2018-07-30T08:07:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-templates-sluap79l0bza-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88ccfcb3-e9aa-4b39-b684-2dad39bed92a", "record_id": "flaws_cloudtrail:0000445:88ccfcb3-e9aa-4b39-b684-2dad39bed92a", "row_index": 445, "timestamp": "2018-07-30T08:08:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88ccfcb3-e9aa-4b39-b684-2dad39bed92a", "eventTime": "2018-07-30T08:08:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ctf-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f5b4f74-f9bd-4c60-bfaa-f5be0bb1705a", "record_id": "flaws_cloudtrail:0000446:9f5b4f74-f9bd-4c60-bfaa-f5be0bb1705a", "row_index": 446, "timestamp": "2018-07-30T08:08:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f5b4f74-f9bd-4c60-bfaa-f5be0bb1705a", "eventTime": "2018-07-30T08:08:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "dvparser-data-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0e9802c-b5d3-4456-beab-7a64d169eb2d", "record_id": "flaws_cloudtrail:0000447:e0e9802c-b5d3-4456-beab-7a64d169eb2d", "row_index": 447, "timestamp": "2018-07-30T08:08:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0e9802c-b5d3-4456-beab-7a64d169eb2d", "eventTime": "2018-07-30T08:08:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-204892599609", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93887-4848-4c8a-b16c-5fb4f15bb3be", "record_id": "flaws_cloudtrail:0000448:93887-4848-4c8a-b16c-5fb4f15bb3be", "row_index": 448, "timestamp": "2018-07-30T08:08:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93887-4848-4c8a-b16c-5fb4f15bb3be", "eventTime": "2018-07-30T08:08:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-2-204892599609", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c1265da-9114-40df-b333-813ccb885991a", "record_id": "flaws_cloudtrail:0000449:0c1265da-9114-40df-b333-813ccb885991a", "row_index": 449, "timestamp": "2018-07-30T08:08:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c1265da-9114-40df-b333-813ccb885991a", "eventTime": "2018-07-30T08:08:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "repdv-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f134e232-7d20-4554-9728-c8cbff1e2271", "record_id": "flaws_cloudtrail:0000450:f134e232-7d20-4554-9728-c8cbff1e2271", "row_index": 450, "timestamp": "2018-07-30T08:08:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f134e232-7d20-4554-9728-c8cbff1e2271", "eventTime": "2018-07-30T08:08:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "sail-data-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9fb943b-52ea-454c-aaf0-fa7def82f063", "record_id": "flaws_cloudtrail:0000451:b9fb943b-52ea-454c-aaf0-fa7def82f063", "row_index": 451, "timestamp": "2018-07-30T08:08:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9fb943b-52ea-454c-aaf0-fa7def82f063", "eventTime": "2018-07-30T08:08:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "threatencylopediabackup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ebf738f-e2f4-42c5-9b86-bb748f6a4bca", "record_id": "flaws_cloudtrail:0000452:7ebf738f-e2f4-42c5-9b86-bb748f6a4bca", "row_index": 452, "timestamp": "2018-07-30T08:08:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ebf738f-e2f4-42c5-9b86-bb748f6a4bca", "eventTime": "2018-07-30T08:08:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-builds", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef2779a-dfce-422d-a8ef-0fc24d2d4264", "record_id": "flaws_cloudtrail:0000453:5ef2779a-dfce-422d-a8ef-0fc24d2d4264", "row_index": 453, "timestamp": "2018-07-30T08:08:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef2779a-dfce-422d-a8ef-0fc24d2d4264", "eventTime": "2018-07-30T08:08:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-db-migration-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e65bd99-8f7b-4c12-bc05-71583ad26", "record_id": "flaws_cloudtrail:0000454:1e65bd99-8f7b-4c12-bc05-71583ad26", "row_index": 454, "timestamp": "2018-07-30T08:08:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e65bd99-8f7b-4c12-bc05-71583ad26", "eventTime": "2018-07-30T08:08:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5893b2-15fc-4414-854b-04ed62956bbe", "record_id": "flaws_cloudtrail:0000455:bb5893b2-15fc-4414-854b-04ed62956bbe", "row_index": 455, "timestamp": "2018-07-30T08:08:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5893b2-15fc-4414-854b-04ed62956bbe", "eventTime": "2018-07-30T08:08:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-dev-elb-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74fbed9-ceb3-49da-b32d-a266820ede06", "record_id": "flaws_cloudtrail:0000456:f74fbed9-ceb3-49da-b32d-a266820ede06", "row_index": 456, "timestamp": "2018-07-30T08:08:24Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-124"], "raw_record_size_bytes": 618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74fbed9-ceb3-49da-b32d-a266820ede06", "eventTime": "2018-07-30T08:08:24Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-124"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-124"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3dc2a7c-7be9-4315-9f54-314114a56325", "record_id": "flaws_cloudtrail:0000457:d3dc2a7c-7be9-4315-9f54-314114a56325", "row_index": 457, "timestamp": "2018-07-30T08:08:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3dc2a7c-7be9-4315-9f54-314114a56325", "eventTime": "2018-07-30T08:08:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-dev-jenkinsdeploy", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf04daba-a764-4477-a1a2-b42118", "record_id": "flaws_cloudtrail:0000458:cf04daba-a764-4477-a1a2-b42118", "row_index": 458, "timestamp": "2018-07-30T08:08:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf04daba-a764-4477-a1a2-b42118", "eventTime": "2018-07-30T08:08:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-dev-sail-redshift-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95367d-9b62-4c46-986f-b94c6b3c3188", "record_id": "flaws_cloudtrail:0000459:95367d-9b62-4c46-986f-b94c6b3c3188", "row_index": 459, "timestamp": "2018-07-30T08:08:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95367d-9b62-4c46-986f-b94c6b3c3188", "eventTime": "2018-07-30T08:08:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-device-configs-itg", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a14d9d61-fa66-47a1-adfe-148f1638d52a", "record_id": "flaws_cloudtrail:0000460:a14d9d61-fa66-47a1-adfe-148f1638d52a", "row_index": 460, "timestamp": "2018-07-30T08:08:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a14d9d61-fa66-47a1-adfe-148f1638d52a", "eventTime": "2018-07-30T08:08:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-device-configs-pro", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e10f4d-1999-4734-b196-075e3085d212", "record_id": "flaws_cloudtrail:0000461:25e10f4d-1999-4734-b196-075e3085d212", "row_index": 461, "timestamp": "2018-07-30T08:08:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e10f4d-1999-4734-b196-075e3085d212", "eventTime": "2018-07-30T08:08:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-device-configs-pro-old", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac720a0d-66a7-4f06-8022-e6b0f92a69b9", "record_id": "flaws_cloudtrail:0000462:ac720a0d-66a7-4f06-8022-e6b0f92a69b9", "row_index": 462, "timestamp": "2018-07-30T08:08:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac720a0d-66a7-4f06-8022-e6b0f92a69b9", "eventTime": "2018-07-30T08:08:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-device-configs-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34f7e7f0-bb54-4f14-8115-e9b4dc9e10f8", "record_id": "flaws_cloudtrail:0000463:34f7e7f0-bb54-4f14-8115-e9b4dc9e10f8", "row_index": 463, "timestamp": "2018-07-30T08:08:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34f7e7f0-bb54-4f14-8115-e9b4dc9e10f8", "eventTime": "2018-07-30T08:08:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-devops-vm-templates", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f327be-b90e-4797-951e-5a52a0d4aca2", "record_id": "flaws_cloudtrail:0000464:02f327be-b90e-4797-951e-5a52a0d4aca2", "row_index": 464, "timestamp": "2018-07-30T08:08:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f327be-b90e-4797-951e-5a52a0d4aca2", "eventTime": "2018-07-30T08:08:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-itg", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1759b763-d647-4390-813e-44440fce7a76", "record_id": "flaws_cloudtrail:0000465:1759b763-d647-4390-813e-44440fce7a76", "row_index": 465, "timestamp": "2018-07-30T08:08:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1759b763-d647-4390-813e-44440fce7a76", "eventTime": "2018-07-30T08:08:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-itg-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a72a22c3-01eb-4f02-9ce8-b6efe7f60bd0", "record_id": "flaws_cloudtrail:0000466:a72a22c3-01eb-4f02-9ce8-b6efe7f60bd0", "row_index": 466, "timestamp": "2018-07-30T08:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a72a22c3-01eb-4f02-9ce8-b6efe7f60bd0", "eventTime": "2018-07-30T08:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-lambda", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665a772e-0f50-48f7-8851-2893d85f2356", "record_id": "flaws_cloudtrail:0000467:665a772e-0f50-48f7-8851-2893d85f2356", "row_index": 467, "timestamp": "2018-07-30T08:08:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665a772e-0f50-48f7-8851-2893d85f2356", "eventTime": "2018-07-30T08:08:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd683895-d025-44a2-a712-83bc0c6a7efe", "record_id": "flaws_cloudtrail:0000468:9bd683895-d025-44a2-a712-83bc0c6a7efe", "row_index": 468, "timestamp": "2018-07-30T08:08:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd683895-d025-44a2-a712-83bc0c6a7efe", "eventTime": "2018-07-30T08:08:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-qa", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db76a6a-1b04-46ce-b72f-7bec7b626d7b", "record_id": "flaws_cloudtrail:0000469:3db76a6a-1b04-46ce-b72f-7bec7b626d7b", "row_index": 469, "timestamp": "2018-07-30T08:08:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db76a6a-1b04-46ce-b72f-7bec7b626d7b", "eventTime": "2018-07-30T08:08:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-sail-redshift-temp", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bc3df00-6cf4-4e43-8fbd-20807f48332e", "record_id": "flaws_cloudtrail:0000470:7bc3df00-6cf4-4e43-8fbd-20807f48332e", "row_index": 470, "timestamp": "2018-07-30T08:08:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bc3df00-6cf4-4e43-8fbd-20807f48332e", "eventTime": "2018-07-30T08:08:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmc-sms-config-xml-files", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89da11fd-aea8-4a89-814e-684ee46c22eb", "record_id": "flaws_cloudtrail:0000471:89da11fd-aea8-4a89-814e-684ee46c22eb", "row_index": 471, "timestamp": "2018-07-30T08:08:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89da11fd-aea8-4a89-814e-684ee46c22eb", "eventTime": "2018-07-30T08:08:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmcawsmove-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e24196-9fdc-4a28-b56e-310021dc0053", "record_id": "flaws_cloudtrail:0000472:2e24196-9fdc-4a28-b56e-310021dc0053", "row_index": 472, "timestamp": "2018-07-30T08:08:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e24196-9fdc-4a28-b56e-310021dc0053", "eventTime": "2018-07-30T08:08:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-akamai-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316d8788-4d39-4308-85ce-4e60376102d8", "record_id": "flaws_cloudtrail:0000473:316d8788-4d39-4308-85ce-4e60376102d8", "row_index": 473, "timestamp": "2018-07-30T08:08:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316d8788-4d39-4308-85ce-4e60376102d8", "eventTime": "2018-07-30T08:08:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-akamai-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e12840-33e2-4dc4-a161-2257e963ad33", "record_id": "flaws_cloudtrail:0000474:6e12840-33e2-4dc4-a161-2257e963ad33", "row_index": 474, "timestamp": "2018-07-30T08:08:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e12840-33e2-4dc4-a161-2257e963ad33", "eventTime": "2018-07-30T08:08:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-akamai-purged", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1952b34-bff1-4749-9d25-81f1a077ab2b", "record_id": "flaws_cloudtrail:0000475:b1952b34-bff1-4749-9d25-81f1a077ab2b", "row_index": 475, "timestamp": "2018-07-30T08:09:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1952b34-bff1-4749-9d25-81f1a077ab2b", "eventTime": "2018-07-30T08:09:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-aws-scripts", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4046ec0b-7986-4731-ac1f-7a384d62cc9e", "record_id": "flaws_cloudtrail:0000476:4046ec0b-7986-4731-ac1f-7a384d62cc9e", "row_index": 476, "timestamp": "2018-07-30T08:09:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4046ec0b-7986-4731-ac1f-7a384d62cc9e", "eventTime": "2018-07-30T08:09:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-octopus-packages", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58ca952d-0887-46e0-9ad8-b7a5f5b793920", "record_id": "flaws_cloudtrail:0000477:58ca952d-0887-46e0-9ad8-b7a5f5b793920", "row_index": 477, "timestamp": "2018-07-30T08:09:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58ca952d-0887-46e0-9ad8-b7a5f5b793920", "eventTime": "2018-07-30T08:09:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-pg-dumps-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "825186ea1-3165-43be-bf7e-7da9d0a68666", "record_id": "flaws_cloudtrail:0000478:825186ea1-3165-43be-bf7e-7da9d0a68666", "row_index": 478, "timestamp": "2018-07-30T08:09:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "825186ea1-3165-43be-bf7e-7da9d0a68666", "eventTime": "2018-07-30T08:09:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tp-system-manager", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31f2221-6758-4988-8f04-746dedfbe725", "record_id": "flaws_cloudtrail:0000479:e31f2221-6758-4988-8f04-746dedfbe725", "row_index": 479, "timestamp": "2018-07-30T08:09:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31f2221-6758-4988-8f04-746dedfbe725", "eventTime": "2018-07-30T08:09:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ead-fb-data-west2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bb4f1c-e547-4eac-9fff-c8403b3686fd", "record_id": "flaws_cloudtrail:0000480:d6bb4f1c-e547-4eac-9fff-c8403b3686fd", "row_index": 480, "timestamp": "2018-07-30T08:09:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bb4f1c-e547-4eac-9fff-c8403b3686fd", "eventTime": "2018-07-30T08:09:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ead-spndata-bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e9f127-5c17-4957-8125-347a43b745093", "record_id": "flaws_cloudtrail:0000481:c3e9f127-5c17-4957-8125-347a43b745093", "row_index": 481, "timestamp": "2018-07-30T08:09:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e9f127-5c17-4957-8125-347a43b745093", "eventTime": "2018-07-30T08:09:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "eaddata-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6116b003-2eea-4401-957d-a17965f708c1", "record_id": "flaws_cloudtrail:0000482:6116b003-2eea-4401-957d-a17965f708c1", "row_index": 482, "timestamp": "2018-07-30T08:09:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6116b003-2eea-4401-957d-a17965f708c1", "eventTime": "2018-07-30T08:09:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "eadtestbucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43401863-313e-4deb-a591-c9d39cab4574", "record_id": "flaws_cloudtrail:0000483:43401863-313e-4deb-a591-c9d39cab4574", "row_index": 483, "timestamp": "2018-07-30T08:09:20Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-124"], "raw_record_size_bytes": 623, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43401863-313e-4deb-a591-c9d39cab4574", "eventTime": "2018-07-30T08:09:20Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-124"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-124"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62c64e6e-7211-4e85-9d3a-b43792377e40", "record_id": "flaws_cloudtrail:0000484:62c64e6e-7211-4e85-9d3a-b43792377e40", "row_index": 484, "timestamp": "2018-07-30T08:09:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62c64e6e-7211-4e85-9d3a-b43792377e40", "eventTime": "2018-07-30T08:09:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tmuploadersite", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e38a5e-e33b-4fba-be69-884a3ba2df5b", "record_id": "flaws_cloudtrail:0000485:b9e38a5e-e33b-4fba-be69-884a3ba2df5b", "row_index": 485, "timestamp": "2018-07-30T08:09:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e38a5e-e33b-4fba-be69-884a3ba2df5b", "eventTime": "2018-07-30T08:09:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "trenduploadfiles", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8e60250-c93b-4d24-b1d0-110eede189113", "record_id": "flaws_cloudtrail:0000486:f8e60250-c93b-4d24-b1d0-110eede189113", "row_index": 486, "timestamp": "2018-07-30T08:09:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8e60250-c93b-4d24-b1d0-110eede189113", "eventTime": "2018-07-30T08:09:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "tstcse-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0dd22b8-d5e7-41d4-8030-99cb4e05b611", "record_id": "flaws_cloudtrail:0000487:f0dd22b8-d5e7-41d4-8030-99cb4e05b611", "row_index": 487, "timestamp": "2018-07-30T08:09:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0dd22b8-d5e7-41d4-8030-99cb4e05b611", "eventTime": "2018-07-30T08:09:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-ithybrid-billing", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "031a5a77-fc43-46e7-8d2a-3b6a1f530ea2", "record_id": "flaws_cloudtrail:0000488:031a5a77-fc43-46e7-8d2a-3b6a1f530ea2", "row_index": 488, "timestamp": "2018-07-30T08:09:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "031a5a77-fc43-46e7-8d2a-3b6a1f530ea2", "eventTime": "2018-07-30T08:09:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-aim-jarvis", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409067d5-14bb-4e1e-950d-46432d8923f3", "record_id": "flaws_cloudtrail:0000489:409067d5-14bb-4e1e-950d-46432d8923f3", "row_index": 489, "timestamp": "2018-07-30T08:09:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409067d5-14bb-4e1e-950d-46432d8923f3", "eventTime": "2018-07-30T08:09:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-aim-jarvis-s3-connector", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d476c6e-9b0b-4586-bbce-911e112f70b0", "record_id": "flaws_cloudtrail:0000490:7d476c6e-9b0b-4586-bbce-911e112f70b0", "row_index": 490, "timestamp": "2018-07-30T08:09:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d476c6e-9b0b-4586-bbce-911e112f70b0", "eventTime": "2018-07-30T08:09:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-aim-jarvis-upload-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e099b10d-ca5e-4675-863d-74bda6cb9f56", "record_id": "flaws_cloudtrail:0000491:e099b10d-ca5e-4675-863d-74bda6cb9f56", "row_index": 491, "timestamp": "2018-07-30T08:09:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e099b10d-ca5e-4675-863d-74bda6cb9f56", "eventTime": "2018-07-30T08:09:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-aim-tsew", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a4de67-f11f-4d41-8326-18cf0027dd12", "record_id": "flaws_cloudtrail:0000492:e5a4de67-f11f-4d41-8326-18cf0027dd12", "row_index": 492, "timestamp": "2018-07-30T08:09:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a4de67-f11f-4d41-8326-18cf0027dd12", "eventTime": "2018-07-30T08:09:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-corpph-bp-betakits", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d008eccb-e9a9-4136-bea6-76efb22d02f3", "record_id": "flaws_cloudtrail:0000493:d008eccb-e9a9-4136-bea6-76efb22d02f3", "row_index": 493, "timestamp": "2018-07-30T08:09:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d008eccb-e9a9-4136-bea6-76efb22d02f3", "eventTime": "2018-07-30T08:09:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-ba-corpph-bp-betasfile", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e325f31a-39ee-4cca-ae3a-735149535d27", "record_id": "flaws_cloudtrail:0000494:e325f31a-39ee-4cca-ae3a-735149535d27", "row_index": 494, "timestamp": "2018-07-30T08:09:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e325f31a-39ee-4cca-ae3a-735149535d27", "eventTime": "2018-07-30T08:09:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-emeait-munki", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2462b539-9fde-4985-9dba-ee9ba723afef", "record_id": "flaws_cloudtrail:0000495:2462b539-9fde-4985-9dba-ee9ba723afef", "row_index": 495, "timestamp": "2018-07-30T08:09:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2462b539-9fde-4985-9dba-ee9ba723afef", "eventTime": "2018-07-30T08:09:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-emeait-munkirepo", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b11720-90dd-40f4-93d2-21272a613f", "record_id": "flaws_cloudtrail:0000496:b11720-90dd-40f4-93d2-21272a613f", "row_index": 496, "timestamp": "2018-07-30T08:10:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b11720-90dd-40f4-93d2-21272a613f", "eventTime": "2018-07-30T08:10:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-it", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cca0741-c67e-4495-b24d-f99fcbeca3b4", "record_id": "flaws_cloudtrail:0000497:6cca0741-c67e-4495-b24d-f99fcbeca3b4", "row_index": 497, "timestamp": "2018-07-30T08:10:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cca0741-c67e-4495-b24d-f99fcbeca3b4", "eventTime": "2018-07-30T08:10:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-it-smt", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "954b22dc-72f4-494f-a5b2-826fcf105820", "record_id": "flaws_cloudtrail:0000498:954b22dc-72f4-494f-a5b2-826fcf105820", "row_index": 498, "timestamp": "2018-07-30T08:10:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "954b22dc-72f4-494f-a5b2-826fcf105820", "eventTime": "2018-07-30T08:10:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-mft", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75459d72-c2f1-42fb-8174-d7e4d876623f", "record_id": "flaws_cloudtrail:0000499:75459d72-c2f1-42fb-8174-d7e4d876623f", "row_index": 499, "timestamp": "2018-07-30T08:10:10Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALW7TEIHGK8YFM3YH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.137.140.51", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-124", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75459d72-c2f1-42fb-8174-d7e4d876623f", "eventTime": "2018-07-30T08:10:10Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.137.140.51", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALW7TEIHGK8YFM3YH", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-124", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-124"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9699f5f3-1604-4b93-888f-7fab76b0be08", "record_id": "flaws_cloudtrail:0000500:9699f5f3-1604-4b93-888f-7fab76b0be08", "row_index": 500, "timestamp": "2018-07-30T08:10:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9699f5f3-1604-4b93-888f-7fab76b0be08", "eventTime": "2018-07-30T08:10:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsca-twit-spinnakerpoc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00552fd4-f25f-4101-836b-f958cb545fa9", "record_id": "flaws_cloudtrail:0000501:00552fd4-f25f-4101-836b-f958cb545fa9", "row_index": 501, "timestamp": "2018-07-30T08:10:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00552fd4-f25f-4101-836b-f958cb545fa9", "eventTime": "2018-07-30T08:10:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsor-ba-aim-bpm", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681a5fa5-7b87-4f06-af4b-177937075751", "record_id": "flaws_cloudtrail:0000502:681a5fa5-7b87-4f06-af4b-177937075751", "row_index": 502, "timestamp": "2018-07-30T08:10:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681a5fa5-7b87-4f06-af4b-177937075751", "eventTime": "2018-07-30T08:10:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsor-ba-aim-bpm-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc7ac082-1e11-4588-a5f5-b159ae25f95f", "record_id": "flaws_cloudtrail:0000503:dc7ac082-1e11-4588-a5f5-b159ae25f95f", "row_index": 503, "timestamp": "2018-07-30T08:10:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc7ac082-1e11-4588-a5f5-b159ae25f95f", "eventTime": "2018-07-30T08:10:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsor-ba-corpph-bp-betakits", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aef0bf66-0014-41f1-a2f5-e6452a48dae8", "record_id": "flaws_cloudtrail:0000504:aef0bf66-0014-41f1-a2f5-e6452a48dae8", "row_index": 504, "timestamp": "2018-07-30T08:10:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aef0bf66-0014-41f1-a2f5-e6452a48dae8", "eventTime": "2018-07-30T08:10:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "awsor-ba-corpph-bp-betasfile", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad35247-6c22-49e9-a44e-03f1f62419d4", "record_id": "flaws_cloudtrail:0000505:aad35247-6c22-49e9-a44e-03f1f62419d4", "row_index": 505, "timestamp": "2018-07-30T08:10:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad35247-6c22-49e9-a44e-03f1f62419d4", "eventTime": "2018-07-30T08:10:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-templates-12levn2ua9cu5-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e407d3-1538-4823-b0de-56fffdacd43c", "record_id": "flaws_cloudtrail:0000506:36e407d3-1538-4823-b0de-56fffdacd43c", "row_index": 506, "timestamp": "2018-07-30T08:10:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e407d3-1538-4823-b0de-56fffdacd43c", "eventTime": "2018-07-30T08:10:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e1234dd532e5", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b816a5-a961-4d7e-8647-49be82757", "record_id": "flaws_cloudtrail:0000507:62b816a5-a961-4d7e-8647-49be82757", "row_index": 507, "timestamp": "2018-07-30T08:10:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b816a5-a961-4d7e-8647-49be82757", "eventTime": "2018-07-30T08:10:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "corpit-eks-nodegroup-template", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32389a1-c65b-4c08-bde3-5a2de65bbd18", "record_id": "flaws_cloudtrail:0000508:32389a1-c65b-4c08-bde3-5a2de65bbd18", "row_index": 508, "timestamp": "2018-07-30T08:10:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32389a1-c65b-4c08-bde3-5a2de65bbd18", "eventTime": "2018-07-30T08:10:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-1-555564818176", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3d26de-a66a-48ad-a2ab-cdf521ba36b2", "record_id": "flaws_cloudtrail:0000509:3c3d26de-a66a-48ad-a2ab-cdf521ba36b2", "row_index": 509, "timestamp": "2018-07-30T08:10:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3d26de-a66a-48ad-a2ab-cdf521ba36b2", "eventTime": "2018-07-30T08:10:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ithybrid-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb5a830-52dd-4cb6-9900-db4fff2613f4", "record_id": "flaws_cloudtrail:0000510:1cb5a830-52dd-4cb6-9900-db4fff2613f4", "row_index": 510, "timestamp": "2018-07-30T08:10:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb5a830-52dd-4cb6-9900-db4fff2613f4", "eventTime": "2018-07-30T08:10:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "jarvis.maintenance", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6847dc5-5841-48f2-a46d-0357ec83778a", "record_id": "flaws_cloudtrail:0000511:d6847dc5-5841-48f2-a46d-0357ec83778a", "row_index": 511, "timestamp": "2018-07-30T08:10:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6847dc5-5841-48f2-a46d-0357ec83778a", "eventTime": "2018-07-30T08:10:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "alloftrendmaleoawsprod-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be02dbc9-97a9-4fea-9c5d-b49092475369", "record_id": "flaws_cloudtrail:0000512:be02dbc9-97a9-4fea-9c5d-b49092475369", "row_index": 512, "timestamp": "2018-07-30T08:10:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be02dbc9-97a9-4fea-9c5d-b49092475369", "eventTime": "2018-07-30T08:10:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-b03a1d62329b-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f99c5e-1bdc-4012-9e4c-3c65557f42f5", "record_id": "flaws_cloudtrail:0000513:83f99c5e-1bdc-4012-9e4c-3c65557f42f5", "row_index": 513, "timestamp": "2018-07-30T08:10:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f99c5e-1bdc-4012-9e4c-3c65557f42f5", "eventTime": "2018-07-30T08:10:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-logs-51b21b26c333-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3556afd8-898c-4a4b-8594-5bb04e1cca26", "record_id": "flaws_cloudtrail:0000514:3556afd8-898c-4a4b-8594-5bb04e1cca26", "row_index": 514, "timestamp": "2018-07-30T08:10:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3556afd8-898c-4a4b-8594-5bb04e1cca26", "eventTime": "2018-07-30T08:10:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-log-s3-prod-us-or", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc0acfd-e5a5-4d9c-9851-0f3362c11f46", "record_id": "flaws_cloudtrail:0000515:ffc0acfd-e5a5-4d9c-9851-0f3362c11f46", "row_index": 515, "timestamp": "2018-07-30T08:10:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc0acfd-e5a5-4d9c-9851-0f3362c11f46", "eventTime": "2018-07-30T08:10:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-prod-accesslog-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6fd041-3fbb-4eac-bbe1-564898622345", "record_id": "flaws_cloudtrail:0000516:0f6fd041-3fbb-4eac-bbe1-564898622345", "row_index": 516, "timestamp": "2018-07-30T08:10:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6fd041-3fbb-4eac-bbe1-564898622345", "eventTime": "2018-07-30T08:10:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-prod-mlo-category-deploy", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9664ec21-ee50-46f2-be4e-55ab7d5fb6d9", "record_id": "flaws_cloudtrail:0000517:9664ec21-ee50-46f2-be4e-55ab7d5fb6d9", "row_index": 517, "timestamp": "2018-07-30T08:10:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9664ec21-ee50-46f2-be4e-55ab7d5fb6d9", "eventTime": "2018-07-30T08:10:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-prod-mlo-com-res-category", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e029a27-d3d5-43a4-ab70-25ed759502cd8", "record_id": "flaws_cloudtrail:0000518:6e029a27-d3d5-43a4-ab70-25ed759502cd8", "row_index": 518, "timestamp": "2018-07-30T08:10:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e029a27-d3d5-43a4-ab70-25ed759502cd8", "eventTime": "2018-07-30T08:10:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-prod-mlo-com-res-repository-parquet", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "700a4264-b84c-431c-9296-3a1cc5263c8d", "record_id": "flaws_cloudtrail:0000519:700a4264-b84c-431c-9296-3a1cc5263c8d", "row_index": 519, "timestamp": "2018-07-30T08:10:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "700a4264-b84c-431c-9296-3a1cc5263c8d", "eventTime": "2018-07-30T08:10:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "maleo-prod-mlo-com-res-toruk", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d58d447-3d85-4ebc-8413-71d21cb3591c", "record_id": "flaws_cloudtrail:0000520:6d58d447-3d85-4ebc-8413-71d21cb3591c", "row_index": 520, "timestamp": "2018-07-30T08:11:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d58d447-3d85-4ebc-8413-71d21cb3591c", "eventTime": "2018-07-30T08:11:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "steve-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db90636-a00f-4834-a053-1db791618", "record_id": "flaws_cloudtrail:0000521:4db90636-a00f-4834-a053-1db791618", "row_index": 521, "timestamp": "2018-07-30T08:11:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db90636-a00f-4834-a053-1db791618", "eventTime": "2018-07-30T08:11:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "trendmicro-appdata-maleo-prod-mlo", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e686822-c208-4506-aa66-3223edee51d7", "record_id": "flaws_cloudtrail:0000522:4e686822-c208-4506-aa66-3223edee51d7", "row_index": 522, "timestamp": "2018-07-30T08:11:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e686822-c208-4506-aa66-3223edee51d7", "eventTime": "2018-07-30T08:11:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "trendmicro-common-maleo-prod-mlo", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243abd05-500e-4443-bbeb-9399118514d3", "record_id": "flaws_cloudtrail:0000523:243abd05-500e-4443-bbeb-9399118514d3", "row_index": 523, "timestamp": "2018-07-30T08:11:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243abd05-500e-4443-bbeb-9399118514d3", "eventTime": "2018-07-30T08:11:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "trendmicro-logging-maleo-prod-mlo", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb1970cd-0147-4360-ad24-37fe203ba428", "record_id": "flaws_cloudtrail:0000524:bb1970cd-0147-4360-ad24-37fe203ba428", "row_index": 524, "timestamp": "2018-07-30T08:11:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb1970cd-0147-4360-ad24-37fe203ba428", "eventTime": "2018-07-30T08:11:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "aws-athena-query-results-46e02ead48e3-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0625fe08-b59b-45cb-9925-23b80457a1da", "record_id": "flaws_cloudtrail:0000525:0625fe08-b59b-45cb-9925-23b80457a1da", "row_index": 525, "timestamp": "2018-07-30T08:11:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0625fe08-b59b-45cb-9925-23b80457a1da", "eventTime": "2018-07-30T08:11:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-templates-1ionbbop4mq30-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b2086e-72c2-4e84-a217-21c7a6e75b0d", "record_id": "flaws_cloudtrail:0000526:37b2086e-72c2-4e84-a217-21c7a6e75b0d", "row_index": 526, "timestamp": "2018-07-30T08:11:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b2086e-72c2-4e84-a217-21c7a6e75b0d", "eventTime": "2018-07-30T08:11:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-captures", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f8dd2ce-fb8e-428c-be41-bced3579cadb", "record_id": "flaws_cloudtrail:0000527:9f8dd2ce-fb8e-428c-be41-bced3579cadb", "row_index": 527, "timestamp": "2018-07-30T08:11:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f8dd2ce-fb8e-428c-be41-bced3579cadb", "eventTime": "2018-07-30T08:11:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-captures-snapshot", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f52da3df-7889-4716-8721-bfc768130b", "record_id": "flaws_cloudtrail:0000528:f52da3df-7889-4716-8721-bfc768130b", "row_index": 528, "timestamp": "2018-07-30T08:11:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f52da3df-7889-4716-8721-bfc768130b", "eventTime": "2018-07-30T08:11:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-metadata", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5437e448-17e6-49d2-99e9-a4e86428dec0", "record_id": "flaws_cloudtrail:0000529:5437e448-17e6-49d2-99e9-a4e86428dec0", "row_index": 529, "timestamp": "2018-07-30T08:11:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5437e448-17e6-49d2-99e9-a4e86428dec0", "eventTime": "2018-07-30T08:11:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-metadata-snapshot", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc662f41-b91c-4bc8-b719-5dbc394c46a0", "record_id": "flaws_cloudtrail:0000530:bc662f41-b91c-4bc8-b719-5dbc394c46a0", "row_index": 530, "timestamp": "2018-07-30T08:11:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc662f41-b91c-4bc8-b719-5dbc394c46a0", "eventTime": "2018-07-30T08:11:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-payloads", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab00ed5b-3605-44db-bd76-d48dee77628e", "record_id": "flaws_cloudtrail:0000531:ab00ed5b-3605-44db-bd76-d48dee77628e", "row_index": 531, "timestamp": "2018-07-30T08:11:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab00ed5b-3605-44db-bd76-d48dee77628e", "eventTime": "2018-07-30T08:11:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "network-payloads-snapshot", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74517-c9bf-4230-9d0f-06592fe33421", "record_id": "flaws_cloudtrail:0000532:a74517-c9bf-4230-9d0f-06592fe33421", "row_index": 532, "timestamp": "2018-07-30T08:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74517-c9bf-4230-9d0f-06592fe33421", "eventTime": "2018-07-30T08:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "sdp-dev-accesslog-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a1e5500-370e-4c86-82e8-34d3a05e1d92", "record_id": "flaws_cloudtrail:0000533:2a1e5500-370e-4c86-82e8-34d3a05e1d92", "row_index": 533, "timestamp": "2018-07-30T08:11:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a1e5500-370e-4c86-82e8-34d3a05e1d92", "eventTime": "2018-07-30T08:11:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "sequentialdataproject", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bf7cacb-ce91-46b5-beb5-35e12e17249", "record_id": "flaws_cloudtrail:0000534:4bf7cacb-ce91-46b5-beb5-35e12e17249", "row_index": 534, "timestamp": "2018-07-30T08:11:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bf7cacb-ce91-46b5-beb5-35e12e17249", "eventTime": "2018-07-30T08:11:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "sequentialdataproject-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090296bd-911b-481c-a158-0f9f7a999537", "record_id": "flaws_cloudtrail:0000535:090296bd-911b-481c-a158-0f9f7a999537", "row_index": 535, "timestamp": "2018-07-30T08:11:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090296bd-911b-481c-a158-0f9f7a999537", "eventTime": "2018-07-30T08:11:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "stg-sdp", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a18deab-fc8f-4284-80e1-aef7c62ee0fe", "record_id": "flaws_cloudtrail:0000536:4a18deab-fc8f-4284-80e1-aef7c62ee0fe", "row_index": 536, "timestamp": "2018-07-30T08:11:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a18deab-fc8f-4284-80e1-aef7c62ee0fe", "eventTime": "2018-07-30T08:11:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "980291002037-cloudtrial", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a5e14f-dcda-497c-a7d7-d9542f7ccd15", "record_id": "flaws_cloudtrail:0000537:61a5e14f-dcda-497c-a7d7-d9542f7ccd15", "row_index": 537, "timestamp": "2018-07-30T08:11:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a5e14f-dcda-497c-a7d7-d9542f7ccd15", "eventTime": "2018-07-30T08:11:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-templates-fuu3iqp8swbc-ap-southeast-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b29b32e2-0737-4301-a44b-9d3062fae0dc", "record_id": "flaws_cloudtrail:0000538:b29b32e2-0737-4301-a44b-9d3062fae0dc", "row_index": 538, "timestamp": "2018-07-30T08:11:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b29b32e2-0737-4301-a44b-9d3062fae0dc", "eventTime": "2018-07-30T08:11:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "hmdm-inhouse-app-stg", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1cda83a-2b0d-4bc8-b8d9-28457ee7", "record_id": "flaws_cloudtrail:0000539:c1cda83a-2b0d-4bc8-b8d9-28457ee7", "row_index": 539, "timestamp": "2018-07-30T08:11:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1cda83a-2b0d-4bc8-b8d9-28457ee7", "eventTime": "2018-07-30T08:11:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "osdp-data-core-ahung", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47223ee-0406-4f29-8628-c806014a8f", "record_id": "flaws_cloudtrail:0000540:47223ee-0406-4f29-8628-c806014a8f", "row_index": 540, "timestamp": "2018-07-30T08:11:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47223ee-0406-4f29-8628-c806014a8f", "eventTime": "2018-07-30T08:11:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMFZO5BE7DIC3PGZM", "expiration": "Jul 30, 2018 2:42:03 PM", "sessionToken": "FQoDYXdzEBEaDLHRcWBqgCtraVrLRSK3AxFDWoWVFvKnXbtb9YAMOTu9+6jXTDhK8WYTDRwHcwOVwUKYWGcATQu8IEY2IGgmqeVxhvZFcTQWyg22EdjwFvyU051einhqTg4dyR0JcPdlCojXylpcsnjkoLeTOnUKmDw+qh2ty+NpoGuc9cBYCG8vlkUrpfN+cwO8xATR9auc/W8VMLNo38CL5rKIQjYqS1/1HROw7JlcFQDERFihfpJJJy/wbAwuRHKLMEeONYhSVWGQfHcY0XdYiztm86wiGwDpvVibguc6GDWb6uSx2+Xyflnj1mmHLiT5V44DJ/y/nVIgOMIEqYy7EssjycQn7a0+OAntvy7xXugdbza1SfFvHe114hlKw+0HTiM1b6Z9ZhTaQ08FjLHtCvWDSHmTrl8+14G/3e8npCJIPMtQQEWGu3HxSjeuNihSksVKYhC+5u5Oyx5s/PLcNWAE+mOl1L6HHUkWjAIT6VqpFwOXlJx4vnLvTrQdVAyI6kGxwM7E0MAog0Ml6CIPx8QTG+ixTKPAZwycoVMLEE8dQh4KwCpY4nY0rZq6+W579jipXznQ4KoKCPPUnS81VnWc6PR/VYJFTZMlC2wowpD72gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d5ffdf-afb7-4c93-9b34-fbba012dae0c", "record_id": "flaws_cloudtrail:0000541:48d5ffdf-afb7-4c93-9b34-fbba012dae0c", "row_index": 541, "timestamp": "2018-07-30T08:11:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d5ffdf-afb7-4c93-9b34-fbba012dae0c", "eventTime": "2018-07-30T08:11:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "osdp-data-dev-migration", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eea64b29-59f9-4cf7-a67e-30c55acfb7ad", "record_id": "flaws_cloudtrail:0000542:eea64b29-59f9-4cf7-a67e-30c55acfb7ad", "row_index": 542, "timestamp": "2018-07-30T08:11:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eea64b29-59f9-4cf7-a67e-30c55acfb7ad", "eventTime": "2018-07-30T08:11:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "osdp-dev-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e6bf058-26fe-4f3a-b949-fa32527b92f", "record_id": "flaws_cloudtrail:0000543:9e6bf058-26fe-4f3a-b949-fa32527b92f", "row_index": 543, "timestamp": "2018-07-30T08:11:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e6bf058-26fe-4f3a-b949-fa32527b92f", "eventTime": "2018-07-30T08:11:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "safesync-qa-05", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187569-c6c4-42b4-b67c-8811034b67c0", "record_id": "flaws_cloudtrail:0000544:187569-c6c4-42b4-b67c-8811034b67c0", "row_index": 544, "timestamp": "2018-07-30T08:11:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187569-c6c4-42b4-b67c-8811034b67c0", "eventTime": "2018-07-30T08:11:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfe-2.1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b525957d-50fa-41ea-918d-3247ccee40c1", "record_id": "flaws_cloudtrail:0000545:1b525957d-50fa-41ea-918d-3247ccee40c1", "row_index": 545, "timestamp": "2018-07-30T08:11:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b525957d-50fa-41ea-918d-3247ccee40c1", "eventTime": "2018-07-30T08:11:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfe-2.1-beta", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da4623e8-5431-4999-9e73-e05e043863", "record_id": "flaws_cloudtrail:0000546:da4623e8-5431-4999-9e73-e05e043863", "row_index": 546, "timestamp": "2018-07-30T08:12:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da4623e8-5431-4999-9e73-e05e043863", "eventTime": "2018-07-30T08:12:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfe-3.0-beta", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b30fce-6026-4c18-8517-4dac211381e2", "record_id": "flaws_cloudtrail:0000547:77b30fce-6026-4c18-8517-4dac211381e2", "row_index": 547, "timestamp": "2018-07-30T08:12:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b30fce-6026-4c18-8517-4dac211381e2", "eventTime": "2018-07-30T08:12:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfe-singleinstall-josie", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f0d9aa8-7339-437c-b66e-bad93624ebe3", "record_id": "flaws_cloudtrail:0000548:2f0d9aa8-7339-437c-b66e-bad93624ebe3", "row_index": 548, "timestamp": "2018-07-30T08:12:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f0d9aa8-7339-437c-b66e-bad93624ebe3", "eventTime": "2018-07-30T08:12:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfe.on.ubuntu.10.04", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da593176-6dfe-4e89-b475-c44c0e763d21", "record_id": "flaws_cloudtrail:0000549:da593176-6dfe-4e89-b475-c44c0e763d21", "row_index": 549, "timestamp": "2018-07-30T08:12:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da593176-6dfe-4e89-b475-c44c0e763d21", "eventTime": "2018-07-30T08:12:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfeporting.test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14887fef-43b6-4b33-b056-d1bdd095f161", "record_id": "flaws_cloudtrail:0000550:14887fef-43b6-4b33-b056-d1bdd095f161", "row_index": 550, "timestamp": "2018-07-30T08:12:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14887fef-43b6-4b33-b056-d1bdd095f161", "eventTime": "2018-07-30T08:12:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ssfeporting.test.1204", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79291cb-4c5e-4096-86ad-f99b1f9ca504", "record_id": "flaws_cloudtrail:0000551:79291cb-4c5e-4096-86ad-f99b1f9ca504", "row_index": 551, "timestamp": "2018-07-30T08:12:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79291cb-4c5e-4096-86ad-f99b1f9ca504", "eventTime": "2018-07-30T08:12:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "test-tschen", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be8ea26-ee56-4ac6-ab48-592e0c47b37a", "record_id": "flaws_cloudtrail:0000552:0be8ea26-ee56-4ac6-ab48-592e0c47b37a", "row_index": 552, "timestamp": "2018-07-30T08:12:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be8ea26-ee56-4ac6-ab48-592e0c47b37a", "eventTime": "2018-07-30T08:12:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ubuntu.10.04.ken", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cfdee7c-1718-4812-bcce-affb6a758495", "record_id": "flaws_cloudtrail:0000553:0cfdee7c-1718-4812-bcce-affb6a758495", "row_index": 553, "timestamp": "2018-07-30T08:12:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cfdee7c-1718-4812-bcce-affb6a758495", "eventTime": "2018-07-30T08:12:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ubuntu.12.04.custom.iso", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5c0b47-3df3-413b-8f0d-6ac3ac3f97d6", "record_id": "flaws_cloudtrail:0000554:ca5c0b47-3df3-413b-8f0d-6ac3ac3f97d6", "row_index": 554, "timestamp": "2018-07-30T08:12:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5c0b47-3df3-413b-8f0d-6ac3ac3f97d6", "eventTime": "2018-07-30T08:12:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "workforce-temp", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd39a65-f9b3-40c2-89fa-7c0999f2d80d", "record_id": "flaws_cloudtrail:0000555:2fd39a65-f9b3-40c2-89fa-7c0999f2d80d", "row_index": 555, "timestamp": "2018-07-30T08:12:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd39a65-f9b3-40c2-89fa-7c0999f2d80d", "eventTime": "2018-07-30T08:12:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ddc-eu-c1-incoming", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a36cec55-6352-4ef1-9d62-9054a0098a47", "record_id": "flaws_cloudtrail:0000556:a36cec55-6352-4ef1-9d62-9054a0098a47", "row_index": 556, "timestamp": "2018-07-30T08:12:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a36cec55-6352-4ef1-9d62-9054a0098a47", "eventTime": "2018-07-30T08:12:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ddc-eu-c1-samples", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b012751d1-2942-45bd-b187-763825ae266a5", "record_id": "flaws_cloudtrail:0000557:b012751d1-2942-45bd-b187-763825ae266a5", "row_index": 557, "timestamp": "2018-07-30T08:12:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b012751d1-2942-45bd-b187-763825ae266a5", "eventTime": "2018-07-30T08:12:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ddc-us-e1-incoming", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b450a62a-8592-498b-940c-be297286469f", "record_id": "flaws_cloudtrail:0000558:b450a62a-8592-498b-940c-be297286469f", "row_index": 558, "timestamp": "2018-07-30T08:12:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b450a62a-8592-498b-940c-be297286469f", "eventTime": "2018-07-30T08:12:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ddc-us-e1-samples", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd56c992-a9e5-4115-9447-ed7b0308a64b", "record_id": "flaws_cloudtrail:0000559:cd56c992-a9e5-4115-9447-ed7b0308a64b", "row_index": 559, "timestamp": "2018-07-30T08:12:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd56c992-a9e5-4115-9447-ed7b0308a64b", "eventTime": "2018-07-30T08:12:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ddcloud-production-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac05970-2310-42f8-80e2-799d2df3df0d", "record_id": "flaws_cloudtrail:0000560:ac05970-2310-42f8-80e2-799d2df3df0d", "row_index": 560, "timestamp": "2018-07-30T08:12:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac05970-2310-42f8-80e2-799d2df3df0d", "eventTime": "2018-07-30T08:12:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "ac-k8s-cluster-template", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af27e21-9f70-45a1-934f-1e1b57bee416", "record_id": "flaws_cloudtrail:0000561:9af27e21-9f70-45a1-934f-1e1b57bee416", "row_index": 561, "timestamp": "2018-07-30T08:12:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af27e21-9f70-45a1-934f-1e1b57bee416", "eventTime": "2018-07-30T08:12:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-alert-smart", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd8aa12-9531-4c68-b002-b8ec3468e5be", "record_id": "flaws_cloudtrail:0000562:bdd8aa12-9531-4c68-b002-b8ec3468e5be", "row_index": 562, "timestamp": "2018-07-30T08:12:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd8aa12-9531-4c68-b002-b8ec3468e5be", "eventTime": "2018-07-30T08:12:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-au", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0f6853f-429d-4095-8da0-fcc1c8713fc7", "record_id": "flaws_cloudtrail:0000563:a0f6853f-429d-4095-8da0-fcc1c8713fc7", "row_index": 563, "timestamp": "2018-07-30T08:12:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0f6853f-429d-4095-8da0-fcc1c8713fc7", "eventTime": "2018-07-30T08:12:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-data-asset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d676bd-fee1-44e8-ab7a-145d22929597", "record_id": "flaws_cloudtrail:0000564:19d676bd-fee1-44e8-ab7a-145d22929597", "row_index": 564, "timestamp": "2018-07-30T08:13:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d676bd-fee1-44e8-ab7a-145d22929597", "eventTime": "2018-07-30T08:13:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-data-collected-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75b5cf45-1dbd-4be2-b877-1075dd043e54", "record_id": "flaws_cloudtrail:0000565:75b5cf45-1dbd-4be2-b877-1075dd043e54", "row_index": 565, "timestamp": "2018-07-30T08:13:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75b5cf45-1dbd-4be2-b877-1075dd043e54", "eventTime": "2018-07-30T08:13:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-data-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952a8d4b-f695-4bcb-bfde-5c8a8418442c", "record_id": "flaws_cloudtrail:0000566:952a8d4b-f695-4bcb-bfde-5c8a8418442c", "row_index": 566, "timestamp": "2018-07-30T08:13:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952a8d4b-f695-4bcb-bfde-5c8a8418442c", "eventTime": "2018-07-30T08:13:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-data-export", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e00f7d3-9b9d-4ddf-9a99-a21f8f38394", "record_id": "flaws_cloudtrail:0000567:9e00f7d3-9b9d-4ddf-9a99-a21f8f38394", "row_index": 567, "timestamp": "2018-07-30T08:13:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e00f7d3-9b9d-4ddf-9a99-a21f8f38394", "eventTime": "2018-07-30T08:13:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-data-result", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee9be803-88f8-47d9-a223-5aa4966fdf51", "record_id": "flaws_cloudtrail:0000568:ee9be803-88f8-47d9-a223-5aa4966fdf51", "row_index": 568, "timestamp": "2018-07-30T08:13:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee9be803-88f8-47d9-a223-5aa4966fdf51", "eventTime": "2018-07-30T08:13:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6318ac4-550b-4529-bd1b-ccdfbcb1f956", "record_id": "flaws_cloudtrail:0000569:d6318ac4-550b-4529-bd1b-ccdfbcb1f956", "row_index": 569, "timestamp": "2018-07-30T08:13:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6318ac4-550b-4529-bd1b-ccdfbcb1f956", "eventTime": "2018-07-30T08:13:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-report-template", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ca2e4c6-64f4-4442-8519-2d1e5a140b8d", "record_id": "flaws_cloudtrail:0000570:6ca2e4c6-64f4-4442-8519-2d1e5a140b8d", "row_index": 570, "timestamp": "2018-07-30T08:13:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ca2e4c6-64f4-4442-8519-2d1e5a140b8d", "eventTime": "2018-07-30T08:13:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-tmcm-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c43680-ddcc-4dbb-a497-ca5e70c04faa", "record_id": "flaws_cloudtrail:0000571:3c43680-ddcc-4dbb-a497-ca5e70c04faa", "row_index": 571, "timestamp": "2018-07-30T08:13:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c43680-ddcc-4dbb-a497-ca5e70c04faa", "eventTime": "2018-07-30T08:13:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-tmfk-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0b9b48-09a8-4367-9618-90e0df8db7a0", "record_id": "flaws_cloudtrail:0000572:3b0b9b48-09a8-4367-9618-90e0df8db7a0", "row_index": 572, "timestamp": "2018-07-30T08:13:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0b9b48-09a8-4367-9618-90e0df8db7a0", "eventTime": "2018-07-30T08:13:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-tmfk-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed4a9c24-d5fc-4680-81ed-cf316779edb7", "record_id": "flaws_cloudtrail:0000573:ed4a9c24-d5fc-4680-81ed-cf316779edb7", "row_index": 573, "timestamp": "2018-07-30T08:13:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed4a9c24-d5fc-4680-81ed-cf316779edb7", "eventTime": "2018-07-30T08:13:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-beta-s3-luwak-tmfk-tool", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b24c869d-4016-4733-b458-9b2ace2d1a69", "record_id": "flaws_cloudtrail:0000574:b24c869d-4016-4733-b458-9b2ace2d1a69", "row_index": 574, "timestamp": "2018-07-30T08:13:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b24c869d-4016-4733-b458-9b2ace2d1a69", "eventTime": "2018-07-30T08:13:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-alert-smart", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "803741-e682-4028-a2d3-fce323c54739", "record_id": "flaws_cloudtrail:0000575:803741-e682-4028-a2d3-fce323c54739", "row_index": 575, "timestamp": "2018-07-30T08:13:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "803741-e682-4028-a2d3-fce323c54739", "eventTime": "2018-07-30T08:13:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-au", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49a40fb6-4e81-42de-9d47-9083b9bb9d63", "record_id": "flaws_cloudtrail:0000576:49a40fb6-4e81-42de-9d47-9083b9bb9d63", "row_index": 576, "timestamp": "2018-07-30T08:13:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49a40fb6-4e81-42de-9d47-9083b9bb9d63", "eventTime": "2018-07-30T08:13:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-data-asset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1acbdeb-e308-4a06-9d81-a19f2f51fdc2", "record_id": "flaws_cloudtrail:0000577:c1acbdeb-e308-4a06-9d81-a19f2f51fdc2", "row_index": 577, "timestamp": "2018-07-30T08:13:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1acbdeb-e308-4a06-9d81-a19f2f51fdc2", "eventTime": "2018-07-30T08:13:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-data-collected-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d328a070-37b6-4d7a-8353-f07ca3c01ef2", "record_id": "flaws_cloudtrail:0000578:d328a070-37b6-4d7a-8353-f07ca3c01ef2", "row_index": 578, "timestamp": "2018-07-30T08:13:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d328a070-37b6-4d7a-8353-f07ca3c01ef2", "eventTime": "2018-07-30T08:13:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-data-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c51cebe-3747-4be9-9149-8891ac85048", "record_id": "flaws_cloudtrail:0000579:2c51cebe-3747-4be9-9149-8891ac85048", "row_index": 579, "timestamp": "2018-07-30T08:13:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c51cebe-3747-4be9-9149-8891ac85048", "eventTime": "2018-07-30T08:13:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-data-export", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2786f0c2-2910-4e06-b19b-17a99c5e9d2e", "record_id": "flaws_cloudtrail:0000580:2786f0c2-2910-4e06-b19b-17a99c5e9d2e", "row_index": 580, "timestamp": "2018-07-30T08:13:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2786f0c2-2910-4e06-b19b-17a99c5e9d2e", "eventTime": "2018-07-30T08:13:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-data-result", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a7d8a8e-7118-4ae2-bcd8-48ccceb0a0fd", "record_id": "flaws_cloudtrail:0000581:5a7d8a8e-7118-4ae2-bcd8-48ccceb0a0fd", "row_index": 581, "timestamp": "2018-07-30T08:13:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a7d8a8e-7118-4ae2-bcd8-48ccceb0a0fd", "eventTime": "2018-07-30T08:13:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "932e055e-e3ed-4ac2-852a-3c1f5839db05", "record_id": "flaws_cloudtrail:0000582:932e055e-e3ed-4ac2-852a-3c1f5839db05", "row_index": 582, "timestamp": "2018-07-30T08:13:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "932e055e-e3ed-4ac2-852a-3c1f5839db05", "eventTime": "2018-07-30T08:13:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-report-template", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f3eabed-f1b4-4f66-9776-1b2bb4406f64", "record_id": "flaws_cloudtrail:0000583:7f3eabed-f1b4-4f66-9776-1b2bb4406f64", "row_index": 583, "timestamp": "2018-07-30T08:13:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f3eabed-f1b4-4f66-9776-1b2bb4406f64", "eventTime": "2018-07-30T08:13:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-tmcm-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4624ec9c-2902-4e70-894d-9848b475e79e", "record_id": "flaws_cloudtrail:0000584:4624ec9c-2902-4e70-894d-9848b475e79e", "row_index": 584, "timestamp": "2018-07-30T08:13:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4624ec9c-2902-4e70-894d-9848b475e79e", "eventTime": "2018-07-30T08:13:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-tmfk-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b5438d-7b5a-4ff8-b21f-ed571e5ff26b", "record_id": "flaws_cloudtrail:0000585:30b5438d-7b5a-4ff8-b21f-ed571e5ff26b", "row_index": 585, "timestamp": "2018-07-30T08:13:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b5438d-7b5a-4ff8-b21f-ed571e5ff26b", "eventTime": "2018-07-30T08:13:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-tmfk-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328de3f9-df7e-442e-9707-643275bba0", "record_id": "flaws_cloudtrail:0000586:328de3f9-df7e-442e-9707-643275bba0", "row_index": 586, "timestamp": "2018-07-30T08:13:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328de3f9-df7e-442e-9707-643275bba0", "eventTime": "2018-07-30T08:13:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-devops-s3-luwak-tmfk-tool", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e757517d-8af6-4848-a849-7a26d3f1affe", "record_id": "flaws_cloudtrail:0000587:e757517d-8af6-4848-a849-7a26d3f1affe", "row_index": 587, "timestamp": "2018-07-30T08:13:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e757517d-8af6-4848-a849-7a26d3f1affe", "eventTime": "2018-07-30T08:13:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-alert-smart", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7ffe24-19a9-479a-b24e-e56c6a0e51f8", "record_id": "flaws_cloudtrail:0000588:9d7ffe24-19a9-479a-b24e-e56c6a0e51f8", "row_index": 588, "timestamp": "2018-07-30T08:13:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7ffe24-19a9-479a-b24e-e56c6a0e51f8", "eventTime": "2018-07-30T08:13:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-au", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab9d1c6-ea79-4734-9760-70885b7d375b", "record_id": "flaws_cloudtrail:0000589:4ab9d1c6-ea79-4734-9760-70885b7d375b", "row_index": 589, "timestamp": "2018-07-30T08:13:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab9d1c6-ea79-4734-9760-70885b7d375b", "eventTime": "2018-07-30T08:13:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-data-asset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47e6f1c5-ba97-4ca7-9a1a-e7b66f636e31", "record_id": "flaws_cloudtrail:0000590:47e6f1c5-ba97-4ca7-9a1a-e7b66f636e31", "row_index": 590, "timestamp": "2018-07-30T08:13:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47e6f1c5-ba97-4ca7-9a1a-e7b66f636e31", "eventTime": "2018-07-30T08:13:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-data-collected-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8ceb02-30cb-48d7-a6ea-5559c61b80f5", "record_id": "flaws_cloudtrail:0000591:7a8ceb02-30cb-48d7-a6ea-5559c61b80f5", "row_index": 591, "timestamp": "2018-07-30T08:13:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8ceb02-30cb-48d7-a6ea-5559c61b80f5", "eventTime": "2018-07-30T08:13:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-data-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a520cd85-8664-4c6d-bbf2-111bef2a8dbd", "record_id": "flaws_cloudtrail:0000592:a520cd85-8664-4c6d-bbf2-111bef2a8dbd", "row_index": 592, "timestamp": "2018-07-30T08:13:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a520cd85-8664-4c6d-bbf2-111bef2a8dbd", "eventTime": "2018-07-30T08:13:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-data-export", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ecf536e-d2ed-4a5f-acfa-744f63b7ca0d", "record_id": "flaws_cloudtrail:0000593:5ecf536e-d2ed-4a5f-acfa-744f63b7ca0d", "row_index": 593, "timestamp": "2018-07-30T08:13:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ecf536e-d2ed-4a5f-acfa-744f63b7ca0d", "eventTime": "2018-07-30T08:13:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-data-result", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fc1fe02-d2d6-4597-9205-f0182dd32a4c", "record_id": "flaws_cloudtrail:0000594:9fc1fe02-d2d6-4597-9205-f0182dd32a4c", "row_index": 594, "timestamp": "2018-07-30T08:14:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fc1fe02-d2d6-4597-9205-f0182dd32a4c", "eventTime": "2018-07-30T08:14:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79fe13c0-62d4-46a7-9c76-694633cde9", "record_id": "flaws_cloudtrail:0000595:79fe13c0-62d4-46a7-9c76-694633cde9", "row_index": 595, "timestamp": "2018-07-30T08:14:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79fe13c0-62d4-46a7-9c76-694633cde9", "eventTime": "2018-07-30T08:14:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-report-template", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c1f4c81-2d81-47a3-b764-9cf6e6a2254c", "record_id": "flaws_cloudtrail:0000596:4c1f4c81-2d81-47a3-b764-9cf6e6a2254c", "row_index": 596, "timestamp": "2018-07-30T08:14:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c1f4c81-2d81-47a3-b764-9cf6e6a2254c", "eventTime": "2018-07-30T08:14:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-tmcm-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597886-2bd5-4d0f-9092-ba538596ab0", "record_id": "flaws_cloudtrail:0000597:597886-2bd5-4d0f-9092-ba538596ab0", "row_index": 597, "timestamp": "2018-07-30T08:14:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597886-2bd5-4d0f-9092-ba538596ab0", "eventTime": "2018-07-30T08:14:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-tmfk-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18f9e92c-a534-43f2-b16a-e538e8522afc", "record_id": "flaws_cloudtrail:0000598:18f9e92c-a534-43f2-b16a-e538e8522afc", "row_index": 598, "timestamp": "2018-07-30T08:14:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18f9e92c-a534-43f2-b16a-e538e8522afc", "eventTime": "2018-07-30T08:14:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-tmfk-report", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256f5559-cdfb-4b1c-99b2-2aa1df6975ed", "record_id": "flaws_cloudtrail:0000599:256f5559-cdfb-4b1c-99b2-2aa1df6975ed", "row_index": 599, "timestamp": "2018-07-30T08:14:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256f5559-cdfb-4b1c-99b2-2aa1df6975ed", "eventTime": "2018-07-30T08:14:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-qa1-s3-luwak-tmfk-tool", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51dfdb49-f8e9-441b-8204-93097b3c6196", "record_id": "flaws_cloudtrail:0000600:51dfdb49-f8e9-441b-8204-93097b3c6196", "row_index": 600, "timestamp": "2018-07-30T08:14:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51dfdb49-f8e9-441b-8204-93097b3c6196", "eventTime": "2018-07-30T08:14:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-alert-smart", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708e1f0f-ee88-49e9-baef-8bb3e05b9c2d", "record_id": "flaws_cloudtrail:0000601:708e1f0f-ee88-49e9-baef-8bb3e05b9c2d", "row_index": 601, "timestamp": "2018-07-30T08:14:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708e1f0f-ee88-49e9-baef-8bb3e05b9c2d", "eventTime": "2018-07-30T08:14:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-au", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd9ccf08-086e-489e-baf5-7af9d07d8521", "record_id": "flaws_cloudtrail:0000602:fd9ccf08-086e-489e-baf5-7af9d07d8521", "row_index": 602, "timestamp": "2018-07-30T08:14:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd9ccf08-086e-489e-baf5-7af9d07d8521", "eventTime": "2018-07-30T08:14:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-data-asset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b259072-5622-429e-81ad-f644dd0f717a", "record_id": "flaws_cloudtrail:0000603:7b259072-5622-429e-81ad-f644dd0f717a", "row_index": 603, "timestamp": "2018-07-30T08:14:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b259072-5622-429e-81ad-f644dd0f717a", "eventTime": "2018-07-30T08:14:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-data-collected-file", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2455d972-898a-46ca-b548-77cd515c7047", "record_id": "flaws_cloudtrail:0000604:2455d972-898a-46ca-b548-77cd515c7047", "row_index": 604, "timestamp": "2018-07-30T08:14:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2455d972-898a-46ca-b548-77cd515c7047", "eventTime": "2018-07-30T08:14:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-data-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a15259-41ad-411a-b304-05173d8e8f16", "record_id": "flaws_cloudtrail:0000605:9a15259-41ad-411a-b304-05173d8e8f16", "row_index": 605, "timestamp": "2018-07-30T08:14:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.9.245.88", "user_agent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a15259-41ad-411a-b304-05173d8e8f16", "eventTime": "2018-07-30T08:14:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.9.245.88", "userAgent": "[Boto3/1.7.65 Python/3.5.2 Linux/4.13.0-37-generic Botocore/1.10.65 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "cf-rd-s3-luwak-data-export", "acl": [""]}, "resources": []}}