Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd6ca32-629a-4860-8380-b61b457cfd7a", "record_id": "flaws_cloudtrail:0000000:1bd6ca32-629a-4860-8380-b61b457cfd7a", "row_index": 0, "timestamp": "2018-04-17T18:50:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd6ca32-629a-4860-8380-b61b457cfd7a", "eventTime": "2018-04-17T18:50:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4f961d-20fb-4a11-a89d-7766bccfa892", "record_id": "flaws_cloudtrail:0000001:bc4f961d-20fb-4a11-a89d-7766bccfa892", "row_index": 1, "timestamp": "2018-04-17T18:50:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4f961d-20fb-4a11-a89d-7766bccfa892", "eventTime": "2018-04-17T18:50:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: yGvtXQO4597DXi9sdG9oJrlZuNdv69dhcrCt54JBcayon194O2ZWXZ8Y1M2znKcMo-HSTfv55Ibg3FWSVL95q19gVf0CwvfLKIAQk6u9dn2dUxmwNyEU8VgwCCoKRe0mE2r2zrVqucHk3KA5WYs8AvBidGqkZ53AarzcUcs6_wi-lYALZqHjQaheQT8V2Mh6epTqkSd2jMv8KGUQVCcVOgTXk1obiYDdg4QIPX-UhWV30wlBjufbSd6jPnF2co0W1LhyJSEMLX0LzB_l_cWve6mbIcRCSfsXggCajuFgl7bqIANUZHQxbPBfWzukR-MDgrRLfgeN0R9jTqu4pBeyts_oU_YxUJGGcvRmQMkkgGbd171VnZwQrxfkC_rgicevEg7lYyNiVjKSWs0EuHIHgTOQxXhvV278C58IbjHARGpiQ-KovPulPiaL7858PQGfXJVC-AAG3aafn477r6g6CibOAXd4aIbR7_AoKW9IWwl_5hrTOUPEOJ3FgCUcRBx0RHjaB2O9K3PbzqIXnQvxoe5n4S8_WVZy4p2tZJJuoIsVgNFfYjWcDAM1CIWzT8-P5uMk2yx2yJccDu3CgoLrrGZoJVQ1L-7JVdDS9Hh8UhY6O30bNUGqFRobVQFdOwq-QcevToCHgwhqJYPK2z0s0XH01bkMXiZE21H-L2g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f366ed-30c9-447a-a43b-5ac00a00d61c", "record_id": "flaws_cloudtrail:0000002:f0f366ed-30c9-447a-a43b-5ac00a00d61c", "row_index": 2, "timestamp": "2018-04-17T18:50:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f366ed-30c9-447a-a43b-5ac00a00d61c", "eventTime": "2018-04-17T18:50:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a71ca0b-de37-46da-9769-e70835b88e", "record_id": "flaws_cloudtrail:0000003:9a71ca0b-de37-46da-9769-e70835b88e", "row_index": 3, "timestamp": "2018-04-17T18:50:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a71ca0b-de37-46da-9769-e70835b88e", "eventTime": "2018-04-17T18:50:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e8d57d-f979-429a-9ece-ebd1c280bc6f", "record_id": "flaws_cloudtrail:0000004:36e8d57d-f979-429a-9ece-ebd1c280bc6f", "row_index": 4, "timestamp": "2018-04-17T18:50:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1377, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e8d57d-f979-429a-9ece-ebd1c280bc6f", "eventTime": "2018-04-17T18:50:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf01446-994d-4c27-9c44-76392f7fc", "record_id": "flaws_cloudtrail:0000005:1cf01446-994d-4c27-9c44-76392f7fc", "row_index": 5, "timestamp": "2018-04-17T18:50:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf01446-994d-4c27-9c44-76392f7fc", "eventTime": "2018-04-17T18:50:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20e64f0-e1ba-4a5e-b278-2f932bf0115d", "record_id": "flaws_cloudtrail:0000006:d20e64f0-e1ba-4a5e-b278-2f932bf0115d", "row_index": 6, "timestamp": "2018-04-17T18:50:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20e64f0-e1ba-4a5e-b278-2f932bf0115d", "eventTime": "2018-04-17T18:50:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: D_7GxElJ3Sw7jqrx8jMYWoVm3X_KqvrR33f4biPYB0vEmh2f5GLBzn6aW1cvTPz3NHpvFopUd_Hy_UH5L-Q05CxV5-h_YHlWxyOdx4Ks5CJEX8b7N70TnuBF7zW8Q1t6UFX14WoPPU_tcpz_6xXXwqSxpKPw0M2UNy6s3erv9MYFWeHO3Fwebvvg9DgNfGrF25umNB1W8kx1s-Ve00hucrYsXo65l0wdCLBdVWXrE6nqwyYyWLnvvBxXflf5JRQMnfRZve4YsmSJo-jX9ZEPos40-5XXneqrXg77nr7SI978aT_T4VviyuhsdSrkbii4ur79wj2ji1RLUhTdR1QXF0rXzUlooPoS4nDCrk5JqChzXkwqtsiyGjXQIfrgmWXUxmWXAw2M30SQUV9C52WqEr2IO_hsKlypzIWaGjgnrWwS_Yv2u7ZiPBln3ey1U1QlH0-U3ig-gJkDCUtfBBvZ3Ph_4BqMpdVVBdk_NCS2EgNJo013GKVkCYA-F1R8a_i-99c9A5IxYcIErEQVbEJY83T2GNQVfMoh_11Z3UDhD-bVjPmIhLT19FoamH3gIIHZFJr5f6UJoC8Gg2WSYC519qkZDvSX4s9peO466M-r-o_ro_hhT-NVDk3Qe0NWgDt0XIyVCb7s3wxthWEIN6bYlfjEWvzNm32ORg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392f2213-9644-42ce-a8b4-8acb3fb2662c", "record_id": "flaws_cloudtrail:0000007:392f2213-9644-42ce-a8b4-8acb3fb2662c", "row_index": 7, "timestamp": "2018-04-17T18:50:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392f2213-9644-42ce-a8b4-8acb3fb2662c", "eventTime": "2018-04-17T18:50:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8fb9f57-3510-4d19-b0eb-5add539c7665", "record_id": "flaws_cloudtrail:0000008:a8fb9f57-3510-4d19-b0eb-5add539c7665", "row_index": 8, "timestamp": "2018-04-17T18:50:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8fb9f57-3510-4d19-b0eb-5add539c7665", "eventTime": "2018-04-17T18:50:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bbcdbf5-0242-448f-8fd3-5ce74a5de4a0", "record_id": "flaws_cloudtrail:0000009:6bbcdbf5-0242-448f-8fd3-5ce74a5de4a0", "row_index": 9, "timestamp": "2018-04-17T18:50:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bbcdbf5-0242-448f-8fd3-5ce74a5de4a0", "eventTime": "2018-04-17T18:50:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289933f05-d965-46d4-bebb-59a86480154c", "record_id": "flaws_cloudtrail:0000010:289933f05-d965-46d4-bebb-59a86480154c", "row_index": 10, "timestamp": "2018-04-17T18:50:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289933f05-d965-46d4-bebb-59a86480154c", "eventTime": "2018-04-17T18:50:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecf7f41f-18dc-444a-97df-a861b67193e1", "record_id": "flaws_cloudtrail:0000011:ecf7f41f-18dc-444a-97df-a861b67193e1", "row_index": 11, "timestamp": "2018-04-17T18:50:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecf7f41f-18dc-444a-97df-a861b67193e1", "eventTime": "2018-04-17T18:50:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2732c684-a12a-4d87-82e9-aacd59567d8", "record_id": "flaws_cloudtrail:0000012:2732c684-a12a-4d87-82e9-aacd59567d8", "row_index": 12, "timestamp": "2018-04-17T18:50:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2732c684-a12a-4d87-82e9-aacd59567d8", "eventTime": "2018-04-17T18:50:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0fe94ec-878e-46eb-8f4e-c290d9b38511", "record_id": "flaws_cloudtrail:0000013:a0fe94ec-878e-46eb-8f4e-c290d9b38511", "row_index": 13, "timestamp": "2018-04-17T18:50:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1381, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0fe94ec-878e-46eb-8f4e-c290d9b38511", "eventTime": "2018-04-17T18:50:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd3521e-cae2-4d51-8c76-586541e96b1a", "record_id": "flaws_cloudtrail:0000014:fbd3521e-cae2-4d51-8c76-586541e96b1a", "row_index": 14, "timestamp": "2018-04-17T18:50:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1927, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd3521e-cae2-4d51-8c76-586541e96b1a", "eventTime": "2018-04-17T18:50:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tsXmlsS9N0TgtMLPjXPa1FpsTgCjKvBvqEuuTJ9Albjfuf7UmDcEOM6iw94enKqKJ8yVp7eNTKOjYClRqbnRGET4lKirhovwSXKInbAI51y8knz-Cn2QdsoWHOe7Gpugco6TbmRhxMi3Al0vzjKi4Sgf66NatXW_TNHigofNkbAaLqlypxvEXw9ZSVCNRoRDMAJ-BmAf-YWSZdk5Ay8segQ7PQSWA2Rf66zfPlgu8Hdlqb3BrfjE8jSOwYyVRlBHOUXx1ZWeL199I7rDb0_JOpAp6_KBFah3nPejHr-76XZZAXtSDdbAkYy-z1rxEb2nQuKNfDoeNouRJLde2LRjja4fWBCnjOFdeRUvxc8rNgoPUQmoWgb5BqKPnvGt3Ii6QFDyJ8y5vdCk03NBIcVxEyAeWZHbwLeTQFo3Q1Cufsid8KV0btlIkMMXPaj-_Jw_zftTdh5XEaJdauH4gfDFSLKRxhS2WYXYy7aezn6BHNFwoJEvYcQDitT2gHOKaJrbcvC5B1RdeuUutj1r-rfKet2td26-mPdqw7I_FYkI3DKtz_m9Fe50Qce2VUcrtb_m6bqVAHqyrNNPBLKHOh965-jZ0MY0tAOf0qKNEJ0Iity3M-O7pYb1Uiwz3nHkAen0lm8A4KOwr10O6KMVXPohYYJXhGn5VusNpy4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "423194a-2ddb-4ef1-b5f5-ebb8733cf22c", "record_id": "flaws_cloudtrail:0000015:423194a-2ddb-4ef1-b5f5-ebb8733cf22c", "row_index": 15, "timestamp": "2018-04-17T18:50:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "423194a-2ddb-4ef1-b5f5-ebb8733cf22c", "eventTime": "2018-04-17T18:50:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8cb168-c967-4a73-83e3-e6260eb40e77", "record_id": "flaws_cloudtrail:0000016:3b8cb168-c967-4a73-83e3-e6260eb40e77", "row_index": 16, "timestamp": "2018-04-17T18:50:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8cb168-c967-4a73-83e3-e6260eb40e77", "eventTime": "2018-04-17T18:50:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QMzm-Ik8s-doBV3U7Nm4AS9mWkFALzlGOrNMRyS8Aot-lthKRekPEuFaHifWKx8teTdBPnYsMZ9hl8jnu3q7l1rpAKT7Pe0Vp2iC2hmedrHY6TXggHbvGXIpDMs7L6VwM_YdvgB4YwbhG19oQvqa8duPRibXxugHQW483vSSWyD3Qp7SmzrfQGIOzukCif9ZowdQcj0DGo1rlp_rOl3waaRjcs0HfHklU2JZ4vuyRkekNNIL-nJiG1G-NSl6LMpZRgXPXRVs-dZcTbUbuCvflN62yCNKLjVQa5FgBttDsLK2D8B7k9h2xbCXNew20zh6eVSjhJI4KJvgHYaJorkPGjP316bx8G37m1KWsVZ9LYjpoIhVntZlXOjxAECqxaJEzQXFJfQBrKmRdFyaJkNH7RQycNIoB6egddHtAOAKC49K6UwyHXECP6iw9fjSIns0wcjppx8ni2ujgSSrX6qHgCIoq4uJSzTOSNkXOQTXRytKeF3PFZxOS2UKKFWOONWVEImTaAclwt2rnE29xzGsp2fW8Q0YOSMoDWiiLFeWUVhMiJ1WL8J9Ztd7weFjXrpmSG7ocDhSIWwIvmkXNidK_DNEHwCENklfdm1Gx8YYVoD0dfyAHN8G0RniPpH35paepbRIgjJ8lvF9WUByYePfexzN0xPMor8sb7Ul71s", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd91b74-5bba-489a-8ed0-4b591eadbbb2", "record_id": "flaws_cloudtrail:0000017:dcd91b74-5bba-489a-8ed0-4b591eadbbb2", "row_index": 17, "timestamp": "2018-04-17T18:50:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd91b74-5bba-489a-8ed0-4b591eadbbb2", "eventTime": "2018-04-17T18:50:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8dfd5e0-b365-4651-82d6-38991e308ad", "record_id": "flaws_cloudtrail:0000018:e8dfd5e0-b365-4651-82d6-38991e308ad", "row_index": 18, "timestamp": "2018-04-17T18:50:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1375, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8dfd5e0-b365-4651-82d6-38991e308ad", "eventTime": "2018-04-17T18:50:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d0fb11a-8913-41f1-8bad-9bc6e43cff70", "record_id": "flaws_cloudtrail:0000019:2d0fb11a-8913-41f1-8bad-9bc6e43cff70", "row_index": 19, "timestamp": "2018-04-17T18:50:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1376, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d0fb11a-8913-41f1-8bad-9bc6e43cff70", "eventTime": "2018-04-17T18:50:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2d81088-f516-421a-84c5-2b6375c0977e", "record_id": "flaws_cloudtrail:0000020:b2d81088-f516-421a-84c5-2b6375c0977e", "row_index": 20, "timestamp": "2018-04-17T18:50:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2d81088-f516-421a-84c5-2b6375c0977e", "eventTime": "2018-04-17T18:50:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb0fe34-2980-4c47-b8a0-8ffbf8d8b0a8", "record_id": "flaws_cloudtrail:0000021:ceb0fe34-2980-4c47-b8a0-8ffbf8d8b0a8", "row_index": 21, "timestamp": "2018-04-17T18:50:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGD2JRX0V6RJGWR59", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1926, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb0fe34-2980-4c47-b8a0-8ffbf8d8b0a8", "eventTime": "2018-04-17T18:50:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JZIHGMasPq_MLXgJld6k2YloxTQzofmX6eO8bfOTKpnXig4GvjM4IP_nIYoMLL0_cwiGdkTaIoCTE05BxuXaAC_MKXfTFoL46wCzjmlQ4X7CWQ72In6z9w_HgztCHr2LksoXoKMpMfPyzrVkO0po0dcZBRDro3nSS3TiPbb2gxkv34C25JOvjN5VkiMWOopdgbyDqzCMYCbGrF_jG_NKYFDEBF56lqNaXh0Kz3UFadU7rlSz81UK_4qhQhrusdI7-gZUzQ3t8DeI93qgHsbHKXpn6AlE8CbR6JAijGrBJ8XtpcYBl862eqvBGzM7f4ctH4Vt9WpAjkLZOgwlcnkh0L0VDSRY-hj21QjyYKs7OLZij3GL5D0CftUqLUoEiMyqMLB3y9DlAZiVjQnuZ5Oy6VQ_6Ed03hMvuBANUisbdk3V8fRbiXv8VhFoOidw_3Y7KhbWSRpmV1uiKPd4yZ_V79dpsxPWrRtyg-T2uOBzqFTxXSUOcYP310N2Lg5qLqdIENrw-PCp4Bp_130l-AvCvUqMF7UfUhyAV1zL8c9DEKI2WC_UZUiODmhEZ6P4a_feEa-5o3LjUTA--auWC3m61kUcs5L_7ISGWaT7haAOmETwfbwyWL1mgK5KCxtRIUhWm99AgQaooHjsjM3JFVqYpdqxGHmh742y6Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGD2JRX0V6RJGWR59", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-04-16T06:59:20Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bbcc6f-d5bc-4f6a-994f-781912805293", "record_id": "flaws_cloudtrail:0000022:f2bbcc6f-d5bc-4f6a-994f-781912805293", "row_index": 22, "timestamp": "2018-04-17T18:50:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bbcc6f-d5bc-4f6a-994f-781912805293", "eventTime": "2018-04-17T18:50:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daca9984-749b-47d2-a9a4-29830d468", "record_id": "flaws_cloudtrail:0000023:daca9984-749b-47d2-a9a4-29830d468", "row_index": 23, "timestamp": "2018-04-17T18:55:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1488, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daca9984-749b-47d2-a9a4-29830d468", "eventTime": "2018-04-17T18:55:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABCKVBKQ8P81P35LZ", "expiration": "Apr 18, 2018 1:28:14 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a87bc15b-5b33-4a55-aafb-7c3c80679ab1", "record_id": "flaws_cloudtrail:0000024:a87bc15b-5b33-4a55-aafb-7c3c80679ab1", "row_index": 24, "timestamp": "2018-04-17T19:01:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a87bc15b-5b33-4a55-aafb-7c3c80679ab1", "eventTime": "2018-04-17T19:01:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ea20e85-daf6-4224-89dc-ac840259ea87", "record_id": "flaws_cloudtrail:0000025:3ea20e85-daf6-4224-89dc-ac840259ea87", "row_index": 25, "timestamp": "2018-04-17T19:01:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ea20e85-daf6-4224-89dc-ac840259ea87", "eventTime": "2018-04-17T19:01:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333242f56-df90-44b8-8b5c-785b8408a893", "record_id": "flaws_cloudtrail:0000026:333242f56-df90-44b8-8b5c-785b8408a893", "row_index": 26, "timestamp": "2018-04-17T19:01:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333242f56-df90-44b8-8b5c-785b8408a893", "eventTime": "2018-04-17T19:01:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ef4426-5848-4328-adbc-f2050dabedbf", "record_id": "flaws_cloudtrail:0000027:96ef4426-5848-4328-adbc-f2050dabedbf", "row_index": 27, "timestamp": "2018-04-17T19:01:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ef4426-5848-4328-adbc-f2050dabedbf", "eventTime": "2018-04-17T19:01:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8a6055-542b-4ed3-8d6e-9da782f23580", "record_id": "flaws_cloudtrail:0000028:da8a6055-542b-4ed3-8d6e-9da782f23580", "row_index": 28, "timestamp": "2018-04-17T19:01:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8a6055-542b-4ed3-8d6e-9da782f23580", "eventTime": "2018-04-17T19:01:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84f101ec-e7ee-43ae-b1a3-320fe9683f74", "record_id": "flaws_cloudtrail:0000029:84f101ec-e7ee-43ae-b1a3-320fe9683f74", "row_index": 29, "timestamp": "2018-04-17T19:01:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84f101ec-e7ee-43ae-b1a3-320fe9683f74", "eventTime": "2018-04-17T19:01:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08872f-08cc-4d46-bbd7-cb52df04dcf3", "record_id": "flaws_cloudtrail:0000030:d08872f-08cc-4d46-bbd7-cb52df04dcf3", "row_index": 30, "timestamp": "2018-04-17T19:01:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08872f-08cc-4d46-bbd7-cb52df04dcf3", "eventTime": "2018-04-17T19:01:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe060099-52fd-4e3c-91df-27d06c199bf5", "record_id": "flaws_cloudtrail:0000031:fe060099-52fd-4e3c-91df-27d06c199bf5", "row_index": 31, "timestamp": "2018-04-17T19:01:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe060099-52fd-4e3c-91df-27d06c199bf5", "eventTime": "2018-04-17T19:01:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c8e4309-9199-42df-8fb8-7c0d132f7805", "record_id": "flaws_cloudtrail:0000032:6c8e4309-9199-42df-8fb8-7c0d132f7805", "row_index": 32, "timestamp": "2018-04-17T19:01:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c8e4309-9199-42df-8fb8-7c0d132f7805", "eventTime": "2018-04-17T19:01:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aec43bb8-6f23-4c76-8940-5e19510ba", "record_id": "flaws_cloudtrail:0000033:aec43bb8-6f23-4c76-8940-5e19510ba", "row_index": 33, "timestamp": "2018-04-17T19:01:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aec43bb8-6f23-4c76-8940-5e19510ba", "eventTime": "2018-04-17T19:01:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f629131a-cd3e-466a-b35b-2d87feefb946", "record_id": "flaws_cloudtrail:0000034:0f629131a-cd3e-466a-b35b-2d87feefb946", "row_index": 34, "timestamp": "2018-04-17T19:01:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f629131a-cd3e-466a-b35b-2d87feefb946", "eventTime": "2018-04-17T19:01:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4da84ac-12b7-4da4-984e-27cceff5e3ac", "record_id": "flaws_cloudtrail:0000035:e4da84ac-12b7-4da4-984e-27cceff5e3ac", "row_index": 35, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4da84ac-12b7-4da4-984e-27cceff5e3ac", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f687b6d4-d050-4c5f-a9e6-4a07f85154fb", "record_id": "flaws_cloudtrail:0000036:f687b6d4-d050-4c5f-a9e6-4a07f85154fb", "row_index": 36, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f687b6d4-d050-4c5f-a9e6-4a07f85154fb", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d346240-9609-4874-8270-cba3c31ebda8", "record_id": "flaws_cloudtrail:0000037:c6d346240-9609-4874-8270-cba3c31ebda8", "row_index": 37, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d346240-9609-4874-8270-cba3c31ebda8", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3ae6460-70f8-4c05-a874-684f29477d", "record_id": "flaws_cloudtrail:0000038:e3ae6460-70f8-4c05-a874-684f29477d", "row_index": 38, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3ae6460-70f8-4c05-a874-684f29477d", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df737c86-2908-4321-9d18-581599cce", "record_id": "flaws_cloudtrail:0000039:df737c86-2908-4321-9d18-581599cce", "row_index": 39, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df737c86-2908-4321-9d18-581599cce", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ed5317d-8700-4944-8abd-2987150fb679", "record_id": "flaws_cloudtrail:0000040:9ed5317d-8700-4944-8abd-2987150fb679", "row_index": 40, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ed5317d-8700-4944-8abd-2987150fb679", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be276002-f578-4ec0-ae42-1ebedb09443", "record_id": "flaws_cloudtrail:0000041:be276002-f578-4ec0-ae42-1ebedb09443", "row_index": 41, "timestamp": "2018-04-17T19:01:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be276002-f578-4ec0-ae42-1ebedb09443", "eventTime": "2018-04-17T19:01:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e79bc21c-7f09-48d8-9807-57cf7cdb9c54", "record_id": "flaws_cloudtrail:0000042:e79bc21c-7f09-48d8-9807-57cf7cdb9c54", "row_index": 42, "timestamp": "2018-04-17T19:01:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e79bc21c-7f09-48d8-9807-57cf7cdb9c54", "eventTime": "2018-04-17T19:01:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f1b02a-fee6-454f-a14c-159bba07da9f", "record_id": "flaws_cloudtrail:0000043:61f1b02a-fee6-454f-a14c-159bba07da9f", "row_index": 43, "timestamp": "2018-04-17T19:01:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f1b02a-fee6-454f-a14c-159bba07da9f", "eventTime": "2018-04-17T19:01:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80274-470e-4449-afbd-9c02ca96c74d", "record_id": "flaws_cloudtrail:0000044:80274-470e-4449-afbd-9c02ca96c74d", "row_index": 44, "timestamp": "2018-04-17T19:01:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80274-470e-4449-afbd-9c02ca96c74d", "eventTime": "2018-04-17T19:01:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c43e77a-084f-4825-9877-d6c7c85afb04", "record_id": "flaws_cloudtrail:0000045:9c43e77a-084f-4825-9877-d6c7c85afb04", "row_index": 45, "timestamp": "2018-04-17T19:01:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c43e77a-084f-4825-9877-d6c7c85afb04", "eventTime": "2018-04-17T19:01:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76daa469-d57f-4bb7-8927-bdacbce6644f", "record_id": "flaws_cloudtrail:0000046:76daa469-d57f-4bb7-8927-bdacbce6644f", "row_index": 46, "timestamp": "2018-04-17T19:01:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76daa469-d57f-4bb7-8927-bdacbce6644f", "eventTime": "2018-04-17T19:01:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fda6a8-b814-4a5e-9efb-1de5af9f0406", "record_id": "flaws_cloudtrail:0000047:90fda6a8-b814-4a5e-9efb-1de5af9f0406", "row_index": 47, "timestamp": "2018-04-17T19:01:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fda6a8-b814-4a5e-9efb-1de5af9f0406", "eventTime": "2018-04-17T19:01:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33fcfeac-9696-4535-a375-748b8dea57c8", "record_id": "flaws_cloudtrail:0000048:33fcfeac-9696-4535-a375-748b8dea57c8", "row_index": 48, "timestamp": "2018-04-17T19:01:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33fcfeac-9696-4535-a375-748b8dea57c8", "eventTime": "2018-04-17T19:01:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6abe7682-47a3-4b91-a57a-ebe393ec2dda", "record_id": "flaws_cloudtrail:0000049:6abe7682-47a3-4b91-a57a-ebe393ec2dda", "row_index": 49, "timestamp": "2018-04-17T19:01:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6abe7682-47a3-4b91-a57a-ebe393ec2dda", "eventTime": "2018-04-17T19:01:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c080e4b7-c75d-48bc-8bb1-f0882c9cfccf", "record_id": "flaws_cloudtrail:0000050:c080e4b7-c75d-48bc-8bb1-f0882c9cfccf", "row_index": 50, "timestamp": "2018-04-17T19:01:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c080e4b7-c75d-48bc-8bb1-f0882c9cfccf", "eventTime": "2018-04-17T19:01:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c417fa34-a654-42ad-8aad-dd262574545f", "record_id": "flaws_cloudtrail:0000051:c417fa34-a654-42ad-8aad-dd262574545f", "row_index": 51, "timestamp": "2018-04-17T19:01:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c417fa34-a654-42ad-8aad-dd262574545f", "eventTime": "2018-04-17T19:01:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "498095be5-d3e1-4cde-9659-d9b28ce233568", "record_id": "flaws_cloudtrail:0000052:498095be5-d3e1-4cde-9659-d9b28ce233568", "row_index": 52, "timestamp": "2018-04-17T19:01:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "498095be5-d3e1-4cde-9659-d9b28ce233568", "eventTime": "2018-04-17T19:01:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eea1c98-4d8c-4c9e-9e20-a1b2f1d1850f", "record_id": "flaws_cloudtrail:0000053:6eea1c98-4d8c-4c9e-9e20-a1b2f1d1850f", "row_index": 53, "timestamp": "2018-04-17T19:01:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eea1c98-4d8c-4c9e-9e20-a1b2f1d1850f", "eventTime": "2018-04-17T19:01:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48628-3537-4d04-845d-ef326035fa2e", "record_id": "flaws_cloudtrail:0000054:48628-3537-4d04-845d-ef326035fa2e", "row_index": 54, "timestamp": "2018-04-17T19:01:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48628-3537-4d04-845d-ef326035fa2e", "eventTime": "2018-04-17T19:01:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f914267-7471-44a8-a586-8fec9f42ec8a", "record_id": "flaws_cloudtrail:0000055:f0f914267-7471-44a8-a586-8fec9f42ec8a", "row_index": 55, "timestamp": "2018-04-17T19:01:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f914267-7471-44a8-a586-8fec9f42ec8a", "eventTime": "2018-04-17T19:01:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4849a33-e062-42fd-81bd-b8424468b7ff", "record_id": "flaws_cloudtrail:0000056:a4849a33-e062-42fd-81bd-b8424468b7ff", "row_index": 56, "timestamp": "2018-04-17T19:01:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4849a33-e062-42fd-81bd-b8424468b7ff", "eventTime": "2018-04-17T19:01:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GARH0yxzbiVkvx58fwiX-WTUWNm9YC3QaWvnAzwI-r3AZ6MM6g-Y69KNkqikGzl_XmHC19FO9c0elU4Gs9ssa4VNKG6Ek40ZR8dQajcbZTLQlz5kEF1N27xhGJ4gxjtwbGUpDno8WP7Jqvtl41DBAA1lEKfgh2sU4JUwwQKdmalTDUaUwobvYa_O-H98jfx21nLjmDpQLjsCK4hhv6QAfQhu9k54uB_D5Gk5rrTD8JeAzeXyZHTLD4kF-JnHca_1zBzn9mZQAOudL_Zvt2nTVnrazOA46dziDsGyHQwzVBAEBTQp7nuuxAfDnrYVKNX8ZX0t_NmLZ9CIOCetBFCzUyySSbSiSlcx0mWMzZdHYBfzXUstvGZzC02EMfojslMaTDOIra0QV3671tHNSWH_2wmVWrAmlWNjGIkeckAiylyQPsT-OdJp-sTYhj_fb85_9BnfqPDswnM-dkMBZAZDRYRvckcddaNWIEGPxYKAmwNJ0Q9cgyBXq9mu-zN-1496PBkxo9KS1usBh1SzlKuxzzYjFnCyXazQdjiQ5GJtX-C6_Rd4QtfN3JK24lWLnE102KVDTxOWztG8zJYXCFLg0E8d1zA1ndIvFM4MUCvTEXvvLvncYDEWP8o6gkcGxXzY6DszAnhGleGebVYS4IaoKLsexfzwstkjtNpCoAnD", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe35256-2d49-43bd-b6e7-f500379a", "record_id": "flaws_cloudtrail:0000057:1fe35256-2d49-43bd-b6e7-f500379a", "row_index": 57, "timestamp": "2018-04-17T19:01:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe35256-2d49-43bd-b6e7-f500379a", "eventTime": "2018-04-17T19:01:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: e8hiq4jRLNl18wkNsrF4W6gI-C1SeUp7TSrucX-bRXf9XmLQlb01nIEgSgk3OC4D8yWGwTdgGbrt0g-QYborh5O4s3m62Yu5p3ySgiygKaRmSgqr2KZCkCB-52CCjZtfWc7FLpTQqXiQG5zS1DddVPMSM7oOU42ZloDQ7ayAimYlH0SzJHSoAN0rpvCalldIX42EsG-hwMrUMMnrXGim2B9623kTPPFOH6LhJGGghvK1sJO1XVqqYyKy9CS7c3emwgLm2pjavQfUkw5K_f8q3NycmcV-KC-Q9HQMqr63ztH1KgZIeSQEGE28ofA_iaDUi4RRRwfz3ZYuJ-loCq92aiZK3iLZWkohi6rQVe-dfx1bSRGqZ7xYz40vsVWb8XkV7sfYLJPml42hU-doKWWE85JV0DInFQt24tYHbaZhqG30sor2iYEsR8iO_bq3M3owBLEXO6lrRUparzEwx6FmsCamNtUNSOsBh1FTg8VhhFdg63cKyNpubZDXXRjTuybuJhxWVhN6x-BF4DMNC08ZQuvEpDXDLjDlEbBjgZ626qbg6SXatmFiss4o03PWuXrvlrdZtd8gLMQbVldNyc3p4mLdT1hyNmVyNLtWjepT2bc2uGz7M09H8HiinuXIjg_YIyeBe_bKAVk9GzLzPSKZ6L3h0kWu-upGd_9XGz0", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1113c9-acb3-4f90-a072-43bfd701ba31", "record_id": "flaws_cloudtrail:0000058:ab1113c9-acb3-4f90-a072-43bfd701ba31", "row_index": 58, "timestamp": "2018-04-17T19:01:43Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1113c9-acb3-4f90-a072-43bfd701ba31", "eventTime": "2018-04-17T19:01:43Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6da2ad3-4032-40cb-a0b0-82ea976366a", "record_id": "flaws_cloudtrail:0000059:b6da2ad3-4032-40cb-a0b0-82ea976366a", "row_index": 59, "timestamp": "2018-04-17T19:01:44Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6da2ad3-4032-40cb-a0b0-82ea976366a", "eventTime": "2018-04-17T19:01:44Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a8fcde7-f397-4fab-99e6-1cefc86ce6a6", "record_id": "flaws_cloudtrail:0000060:5a8fcde7-f397-4fab-99e6-1cefc86ce6a6", "row_index": 60, "timestamp": "2018-04-17T19:01:44Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a8fcde7-f397-4fab-99e6-1cefc86ce6a6", "eventTime": "2018-04-17T19:01:44Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f104ba-5b73-488e-8383-faaa61666fb", "record_id": "flaws_cloudtrail:0000061:c0f104ba-5b73-488e-8383-faaa61666fb", "row_index": 61, "timestamp": "2018-04-17T19:01:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f104ba-5b73-488e-8383-faaa61666fb", "eventTime": "2018-04-17T19:01:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5c81de-8c58-4292-a212-caf47f40060", "record_id": "flaws_cloudtrail:0000062:6a5c81de-8c58-4292-a212-caf47f40060", "row_index": 62, "timestamp": "2018-04-17T19:01:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5c81de-8c58-4292-a212-caf47f40060", "eventTime": "2018-04-17T19:01:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120046e2f-15e7-455e-a8ff-15f6c02500d3", "record_id": "flaws_cloudtrail:0000063:120046e2f-15e7-455e-a8ff-15f6c02500d3", "row_index": 63, "timestamp": "2018-04-17T19:01:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120046e2f-15e7-455e-a8ff-15f6c02500d3", "eventTime": "2018-04-17T19:01:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4HpCMHS4tBWgU7mpilfcQDg7f-NK193pzCP6IexfOtX2_jeAGLnHTuYAEvcL36dzHWiUG9xr_iHIjihvzWO7-1MkX8X__dIgNVB2Y5acFpDN-t0P5_jwjRhCPr5CGeqFvfhlPL-3RCXV227OXcnhr_JEtKQUTklbejicyP8ju6ZiwXrNs4WKETjadIJ2hYuuGy1a78QV-lUlG8nfsRAtnvtyaguyMG39U7iJNutO1jNKwH_XNDu2CeEoZvfxks_7D0ZEcSClFxp8H5kRTCeSjZ6aCt6dzzxJyIayLcVZ5lYcCiYhK8w302ST7DdJTmV8H0M5q4ol1oFEtgQK1lIFIRRY4qBRpsEV1YSCEL26MHbZyvvypKE-s14XkG7bp8zZHbuoPXzanrWbJ8ALl7U-wkcoruTsPRFpRz12kv82ovMC0LYMPG2sC0cdVFkbr8Wp4jr_9uKoXt7wxuzYahSnUhay7uskqTdTp8HFHES7o5cGgM1DM6dHESKy5bFTj-F_00rVPErU9mVD2oYiJrEGylPGmms1oBypaerV5FfSHPfAZQhnA1PNdxIFhJC03REt6CB3LvMH1cs2MyEf27LzXTKBuHegudh9hxkxPBycKb9-az3vcWrmT0XGhnhM4zyk-HIS4sjGuy9wUNU9oyyPToLlEvVN0K-mDQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00619e-fb9a-426c-81d4-913af5634ebf", "record_id": "flaws_cloudtrail:0000064:00619e-fb9a-426c-81d4-913af5634ebf", "row_index": 64, "timestamp": "2018-04-17T19:01:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00619e-fb9a-426c-81d4-913af5634ebf", "eventTime": "2018-04-17T19:01:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24ee9d16-ed89-4305-9242-08a39b51fc41", "record_id": "flaws_cloudtrail:0000065:24ee9d16-ed89-4305-9242-08a39b51fc41", "row_index": 65, "timestamp": "2018-04-17T19:01:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24ee9d16-ed89-4305-9242-08a39b51fc41", "eventTime": "2018-04-17T19:01:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "872fd878-c81a-4443-8294-3eb3326a49c3", "record_id": "flaws_cloudtrail:0000066:872fd878-c81a-4443-8294-3eb3326a49c3", "row_index": 66, "timestamp": "2018-04-17T19:01:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "872fd878-c81a-4443-8294-3eb3326a49c3", "eventTime": "2018-04-17T19:01:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qbe8rEiLm4j-Bg_6JHEEsQpiHY0lzOLP4vyhYbPggbbQumFuUhGgi7tu1E97VuirVxM0C7T15YLomQT0LCXlwIH8eLlrmPDn93NxqcG9dOitRa2IoSIw9PLRUWCS4OwU8ZEQk7qQoUm7RL66hG_ogYC6ypiGp-A87U8p4iBAd3RamCyUbjs5zWoMjft6m2KzIIyDmVqbqTjZwRDdrTwuQsXZdQhqkDZLUtqgNpMaWemUYF_Lfu3_a_HuCtACD5t1IFU-NQGBnQ4B0OjoC9FTAkofa9EuWe_amyOdCOFv_UlLk-yqvSuB9r0SdmQzrxtE0fzVtSOQrq2YFHUK1ZEh638VVBZF9cQMJIPvj7xX0YgCp8_CvBspkW5IYNffsd2-2iZ2ZdJdtLMgxJr7carkW7APXZCnrslSq7RJP4XLNc7xHzgDwHpaTDELwHnP0UFh9fZMELXR230exzpd4bs4tZZRToi5Zu089y2GlZmI3V2I9BSUzyx9s52FLcfDT-tyYma9mUAwimr54_9LO0tGkPpgQIiAnouqEuAI0PveO3v5DIN6NDEE9D4DaW1vgaqgIjO0sK9jSNrjW_qdXWsG4qzIEvKGhw1Sh_nSSXiwEQXBdyoaz6tm4DZ0dp5XsijgUBBdFp_Iu5fpMwaIYixD4AsVEIWxJTB1xw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cc6eaad-089a-485f-92de-123445a7a7a9", "record_id": "flaws_cloudtrail:0000067:3cc6eaad-089a-485f-92de-123445a7a7a9", "row_index": 67, "timestamp": "2018-04-17T19:01:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cc6eaad-089a-485f-92de-123445a7a7a9", "eventTime": "2018-04-17T19:01:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7acf0a-5715-4d1c-b09b-7258479b3afc", "record_id": "flaws_cloudtrail:0000068:3e7acf0a-5715-4d1c-b09b-7258479b3afc", "row_index": 68, "timestamp": "2018-04-17T19:01:47Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7acf0a-5715-4d1c-b09b-7258479b3afc", "eventTime": "2018-04-17T19:01:47Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "741a082e-fd6d-4dc7-b763-48f61705a518", "record_id": "flaws_cloudtrail:0000069:741a082e-fd6d-4dc7-b763-48f61705a518", "row_index": 69, "timestamp": "2018-04-17T19:01:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "741a082e-fd6d-4dc7-b763-48f61705a518", "eventTime": "2018-04-17T19:01:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5654bb07-5203-410c-80e2-e8510b6df9ed", "record_id": "flaws_cloudtrail:0000070:5654bb07-5203-410c-80e2-e8510b6df9ed", "row_index": 70, "timestamp": "2018-04-17T19:01:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5654bb07-5203-410c-80e2-e8510b6df9ed", "eventTime": "2018-04-17T19:01:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ec7e32-4113-458f-88d1-48a4460d4d99", "record_id": "flaws_cloudtrail:0000071:b1ec7e32-4113-458f-88d1-48a4460d4d99", "row_index": 71, "timestamp": "2018-04-17T19:01:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ec7e32-4113-458f-88d1-48a4460d4d99", "eventTime": "2018-04-17T19:01:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa1cb3f6-1652-4c3c-8133-bf1f4dd9876f", "record_id": "flaws_cloudtrail:0000072:fa1cb3f6-1652-4c3c-8133-bf1f4dd9876f", "row_index": 72, "timestamp": "2018-04-17T19:01:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa1cb3f6-1652-4c3c-8133-bf1f4dd9876f", "eventTime": "2018-04-17T19:01:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8e683326-d598-4e71-a62f-ab0fe1284fa9", "record_id": "flaws_cloudtrail:0000073:f8e683326-d598-4e71-a62f-ab0fe1284fa9", "row_index": 73, "timestamp": "2018-04-17T19:01:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8e683326-d598-4e71-a62f-ab0fe1284fa9", "eventTime": "2018-04-17T19:01:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c188504-48c3-4b59-8228-61ee358043ab", "record_id": "flaws_cloudtrail:0000074:c188504-48c3-4b59-8228-61ee358043ab", "row_index": 74, "timestamp": "2018-04-17T19:01:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c188504-48c3-4b59-8228-61ee358043ab", "eventTime": "2018-04-17T19:01:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10b1d57-0176-4173-9707-130a2ad00ffe", "record_id": "flaws_cloudtrail:0000075:c10b1d57-0176-4173-9707-130a2ad00ffe", "row_index": 75, "timestamp": "2018-04-17T19:01:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10b1d57-0176-4173-9707-130a2ad00ffe", "eventTime": "2018-04-17T19:01:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "179b3058-e783-4f5b-bec6-0e4b1b4d2a66", "record_id": "flaws_cloudtrail:0000076:179b3058-e783-4f5b-bec6-0e4b1b4d2a66", "row_index": 76, "timestamp": "2018-04-17T19:01:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "179b3058-e783-4f5b-bec6-0e4b1b4d2a66", "eventTime": "2018-04-17T19:01:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: BItZ6GpBRFmxQ7Ri3DPtbsFb4XLKde-QSZXsOb0NZVwRfmse0_xrZ_h12GgOa7Ft8dLT7jinCwXJJ2ie2vyOU0NThw_meYCFnoAw98h6hoWGErYMpcFwOk3Wy506aKI3Lyd3dJJpFMSowqGh31iGo2UvhvfEAj8CoPMdfPQfkAJqlHoK2tS_yuMnMj5x8JVDwSCw7KGYo2p1yqzdehmW60AL0wPl4hc_ZfFEBI7hxLmemHQnt8XaHZpb1TuhmAIlmstB3hyqeUNPAw7m4YlqKahRDBUWy2AX8mwE8sg_AmU9fiNHYCWWr83h85nx8Z1loJXZgqszOFV3LKMFqozSkRTygak9jbCAEbu2hk_-Wqbb9VIauV89x9x-ZgQzJDETDZGdEo6IyeA19AxYUan8CwvI2CpWRN1F5gDHa0KqBHT5bZdm5wvJgEYRIt5WTjqqzhay3KuBJ1ByKn6C-ECpeU1A1TAWDjBbTz3NaYnCgbv_ExXW1AcY9TgPvMQoRy5FC4SaUkY70q3D10O5fl5fQjAK7wajDhBuTjZVRi8bdtjOsh4m502tBteAOD3yyTSSIRe1zcPojc8WmHQTSXjSIWcUC8JhGzGndnNaWPPNG--KSmt_QgKVa9_LI6pHRQumKAcD_7DqsNa2xJv0VNB55OEfNXh_LYlDFg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e62e73e1-ff1f-43a3-89cd-4128e412be48", "record_id": "flaws_cloudtrail:0000077:e62e73e1-ff1f-43a3-89cd-4128e412be48", "row_index": 77, "timestamp": "2018-04-17T19:01:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e62e73e1-ff1f-43a3-89cd-4128e412be48", "eventTime": "2018-04-17T19:01:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b3fe14e-055a-4758-a864-ec83226b87cd", "record_id": "flaws_cloudtrail:0000078:4b3fe14e-055a-4758-a864-ec83226b87cd", "row_index": 78, "timestamp": "2018-04-17T19:01:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b3fe14e-055a-4758-a864-ec83226b87cd", "eventTime": "2018-04-17T19:01:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213f860a-2379-4f2e-b2dd-ecaf635f8b88", "record_id": "flaws_cloudtrail:0000079:213f860a-2379-4f2e-b2dd-ecaf635f8b88", "row_index": 79, "timestamp": "2018-04-17T19:01:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213f860a-2379-4f2e-b2dd-ecaf635f8b88", "eventTime": "2018-04-17T19:01:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e86bc00-977d-42bb-9762-e0c6e37ecf7b", "record_id": "flaws_cloudtrail:0000080:6e86bc00-977d-42bb-9762-e0c6e37ecf7b", "row_index": 80, "timestamp": "2018-04-17T19:01:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e86bc00-977d-42bb-9762-e0c6e37ecf7b", "eventTime": "2018-04-17T19:01:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "385325a03-3fe0-443a-ac4e-c08c6d624f68", "record_id": "flaws_cloudtrail:0000081:385325a03-3fe0-443a-ac4e-c08c6d624f68", "row_index": 81, "timestamp": "2018-04-17T19:01:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "385325a03-3fe0-443a-ac4e-c08c6d624f68", "eventTime": "2018-04-17T19:01:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd32ebea-4ca1-418d-abd1-93cc62c938d7", "record_id": "flaws_cloudtrail:0000082:bd32ebea-4ca1-418d-abd1-93cc62c938d7", "row_index": 82, "timestamp": "2018-04-17T19:01:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd32ebea-4ca1-418d-abd1-93cc62c938d7", "eventTime": "2018-04-17T19:01:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d634882-f8e7-426a-9af3-34e09317ba7", "record_id": "flaws_cloudtrail:0000083:d634882-f8e7-426a-9af3-34e09317ba7", "row_index": 83, "timestamp": "2018-04-17T19:01:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d634882-f8e7-426a-9af3-34e09317ba7", "eventTime": "2018-04-17T19:01:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf8d6bf-b350-4e1d-a190-d1675b406af2", "record_id": "flaws_cloudtrail:0000084:abf8d6bf-b350-4e1d-a190-d1675b406af2", "row_index": 84, "timestamp": "2018-04-17T19:01:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf8d6bf-b350-4e1d-a190-d1675b406af2", "eventTime": "2018-04-17T19:01:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e078bb33-548a-421b-8583-fe29dedc4022", "record_id": "flaws_cloudtrail:0000085:e078bb33-548a-421b-8583-fe29dedc4022", "row_index": 85, "timestamp": "2018-04-17T19:01:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e078bb33-548a-421b-8583-fe29dedc4022", "eventTime": "2018-04-17T19:01:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c995bf2b-1e62-49d2-be89-d55851c26", "record_id": "flaws_cloudtrail:0000086:c995bf2b-1e62-49d2-be89-d55851c26", "row_index": 86, "timestamp": "2018-04-17T19:01:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c995bf2b-1e62-49d2-be89-d55851c26", "eventTime": "2018-04-17T19:01:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ecf768-7176-42e6-a977-4aa3eda001ed", "record_id": "flaws_cloudtrail:0000087:76ecf768-7176-42e6-a977-4aa3eda001ed", "row_index": 87, "timestamp": "2018-04-17T19:01:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ecf768-7176-42e6-a977-4aa3eda001ed", "eventTime": "2018-04-17T19:01:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58fb5676-9b54-48fb-95f7-93427ed6e25", "record_id": "flaws_cloudtrail:0000088:58fb5676-9b54-48fb-95f7-93427ed6e25", "row_index": 88, "timestamp": "2018-04-17T19:01:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58fb5676-9b54-48fb-95f7-93427ed6e25", "eventTime": "2018-04-17T19:01:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04bfff5b-8b83-4a70-9f7f-8118935e56ed", "record_id": "flaws_cloudtrail:0000089:04bfff5b-8b83-4a70-9f7f-8118935e56ed", "row_index": 89, "timestamp": "2018-04-17T19:01:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04bfff5b-8b83-4a70-9f7f-8118935e56ed", "eventTime": "2018-04-17T19:01:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01705-5ef6-4ac7-a9e1-b73b0ecc457a", "record_id": "flaws_cloudtrail:0000090:01705-5ef6-4ac7-a9e1-b73b0ecc457a", "row_index": 90, "timestamp": "2018-04-17T19:01:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01705-5ef6-4ac7-a9e1-b73b0ecc457a", "eventTime": "2018-04-17T19:01:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: TJPcPDNd6_OnQtLjZaf7X8vfIO0gK57KD9T8Xr0wVHXSH2WxhPZVTK9x86AxnSKswz5EVWUevWNjmunwcivSSua1UOYEo2oJWK42ZSfoqMcLqS7LGBMTkq7IuczMm9MB27Yr7nxTg5nrFCkBV8fzjvyE4sg_0qrRNfeKQEl4KoEJaIoPF_GODTg2-YCnKmj_zwTWiICUOcbIE9eDh5qkG-Ggd8o9y0UDPTQSqZnkCp7nhqhtICP4bSGwwrLeC9PV3Qvp9Z8uJBndvLIUV-DPdAcicARQc7Vo2mJ3Xv9o_NyH2sGK2oLaQGrcz9sAzCAIkraue2mXSjc1Lm_Kyl22E4O5Q98kPLjByOlqvLP8rO6urHEZ5juIo4ZswNinOWuFTEWnt4ibx2JWz4eApOb8Pi07attuZTQYw3B-nAWPz9Me_nLzp7VC19RrHwkAVUkUktMg3_HiPv8nj43ORs1Kir1GsgBwjUIGNdcGdIF_aV5OdWR-oSTPp98gZX9OMngReIAhhPzXiwYRRR5mLd3UACicdhj3TrdGXTCAl9BsVMuQFXbXpVekDpsOzneNzANVZKOhl_MqJ34w4A-JnnkKiQsohX4XgJyeDyH9TZeULwsr2Kmd_slWfTnuvs1EvrFFw8rER52-xdaX4RQvgXqHptdDK3hVFowK5jdKpmI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b7f4fc8-c906-46db-95a1-e964bcea4ca2", "record_id": "flaws_cloudtrail:0000091:0b7f4fc8-c906-46db-95a1-e964bcea4ca2", "row_index": 91, "timestamp": "2018-04-17T19:01:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b7f4fc8-c906-46db-95a1-e964bcea4ca2", "eventTime": "2018-04-17T19:01:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "218ce8ca-c449-4033-b882-e2a5b401608d1", "record_id": "flaws_cloudtrail:0000092:218ce8ca-c449-4033-b882-e2a5b401608d1", "row_index": 92, "timestamp": "2018-04-17T19:01:54Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "218ce8ca-c449-4033-b882-e2a5b401608d1", "eventTime": "2018-04-17T19:01:54Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d014dfa9-dbb1-487a-97a2-7403f2c5b643", "record_id": "flaws_cloudtrail:0000093:d014dfa9-dbb1-487a-97a2-7403f2c5b643", "row_index": 93, "timestamp": "2018-04-17T19:01:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d014dfa9-dbb1-487a-97a2-7403f2c5b643", "eventTime": "2018-04-17T19:01:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a23e8b-0245-4269-8bd8-61fac68a9cce", "record_id": "flaws_cloudtrail:0000094:d6a23e8b-0245-4269-8bd8-61fac68a9cce", "row_index": 94, "timestamp": "2018-04-17T19:01:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a23e8b-0245-4269-8bd8-61fac68a9cce", "eventTime": "2018-04-17T19:01:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e541e40d-9c08-4808-86d4-1a5a702608c3a", "record_id": "flaws_cloudtrail:0000095:e541e40d-9c08-4808-86d4-1a5a702608c3a", "row_index": 95, "timestamp": "2018-04-17T19:01:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e541e40d-9c08-4808-86d4-1a5a702608c3a", "eventTime": "2018-04-17T19:01:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "804bad4c-862d-4562-a428-d9f738a9231e", "record_id": "flaws_cloudtrail:0000096:804bad4c-862d-4562-a428-d9f738a9231e", "row_index": 96, "timestamp": "2018-04-17T19:01:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "804bad4c-862d-4562-a428-d9f738a9231e", "eventTime": "2018-04-17T19:01:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CoogoAH0zJBWtSrCcvo49c0f-jt78IVoRJVywQ9bMGeL0oP_C60rGOCF81zdA__rsUy1JwIhdhJpRVvm5I__bx8aOwj4LpQRdV-_L7xJwJvQ-TQHWYnjW4Y45zS-m5LjzhMx4xLyTj7TrYKBon63kBmTe_e9wgmh1s4sjl4syRnOAiOgFDB3sZr2d_fc4JDp8BNFHXdaunKY3m5lLtqOi4CCd6I-7koBDvsK2L0nTpHjzx8uS-n_k04iOfapm10v_j1yETATkVPFqZVjzmV9QWn343dVZyHmfDCy3BS_34jqUgSweQB8fqS45MHFcMRsG4Q_XtZ-MO33K0Rm7OKmLy0rB0xLhwUvfZ7rwhyMZJlDoKedT6i-cRlEU6hr2DcS6rfO-3vg-4aegtA7HZKfj5vxV3WJqTBN2xEZCbQR2jlWTU6XWX1l9ljy3NIsMp6OKCY2OqRYXD7eIiOmPVkamN73-AXUwxjrci-1AbdTN-Hqzsxg7-ubyzdCT4qG6vv94bp13VQiLO9f2ooxz1NsbLPHRR_8YNgeK-H_glAUKFBvpFMh3os6Gtpu_8UbboXPnjk6h-unIbElEjNCRtsYJLFyssbQifI2BTK_1yIuJII0-w5taUwuJ5qlncuLG6XkyNxQqIR9hc4aU6_jN5XncjX2mnh8KetRSNJXEpM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c6970d-784c-43f2-b820-2cdab65e3a52", "record_id": "flaws_cloudtrail:0000097:f4c6970d-784c-43f2-b820-2cdab65e3a52", "row_index": 97, "timestamp": "2018-04-17T19:01:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c6970d-784c-43f2-b820-2cdab65e3a52", "eventTime": "2018-04-17T19:01:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rMQZK080IK3hf334d1sLTisulSyhzStwdMF7T8Zgz5LZTFwWBt8VAf-KCZejKOd6el--yWUjWaMguhgll46yx60r4ydWd2Ki5D5Yt5Z6yn1oEvN_wFwc7DIzm7i8JM6rX-5NrgIONKbsE_eHhsKuQw-VGNWRyG-UQY1QalVrVGHmyC7zSIG5XUBVkCE8jpg4UtQSEoW6uW1C5ch5SBg8tVIIXTGqB8lf28hAObvzGDhugJLx7Lql422xW2d58ji6jW7AJKTcNyRxsjGNjkzhaNncAQJ-aWy2jZIGmoNIcHjHf8bK5hJOa-znl6x6Q2Vfpdx64kqtrOH6BUpKrkD-nsCCmPmpQsJYx-peRW5ef6MWD8UJuxNLX3U_5bKkChDjXMRbtPZwJP10Ns17F9izR5JPRlsZQqlueYICDELZv9ssYmEkBStAFfoIEwyiIcNfuGxgnjBv9oN1o1m2UOYASMKwn8xL6DCU_sZtNJ02HCGtCfalbnyNb4Pgz_KumPZWnz8Mu2otjP2Uj3Ekha0G3EMvZglR02KzKYVdTjQXnxk5tYIqUN5itjJiVCbD5XcS7ZPrKkAzu0NiaRU4zAASlkc9ZVpOQNUcupfx1pEftsBw3VSpF5IFA0HLkEh1Yfo-uIS42KEurnHws6M864uEKoo5Q8xorDUP5Nak", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccc044ab-58c6-4963-b125-082d908527a10", "record_id": "flaws_cloudtrail:0000098:ccc044ab-58c6-4963-b125-082d908527a10", "row_index": 98, "timestamp": "2018-04-17T19:01:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccc044ab-58c6-4963-b125-082d908527a10", "eventTime": "2018-04-17T19:01:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311bb08a-4f5d-4da2-a84d-c5d879d32093", "record_id": "flaws_cloudtrail:0000099:311bb08a-4f5d-4da2-a84d-c5d879d32093", "row_index": 99, "timestamp": "2018-04-17T19:01:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311bb08a-4f5d-4da2-a84d-c5d879d32093", "eventTime": "2018-04-17T19:01:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d55f21-33a5-4899-84f4-414bc1fd3577", "record_id": "flaws_cloudtrail:0000100:c3d55f21-33a5-4899-84f4-414bc1fd3577", "row_index": 100, "timestamp": "2018-04-17T19:01:56Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d55f21-33a5-4899-84f4-414bc1fd3577", "eventTime": "2018-04-17T19:01:56Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db04ddf-f5f3-4fbd-8246-7c150279e805b", "record_id": "flaws_cloudtrail:0000101:7db04ddf-f5f3-4fbd-8246-7c150279e805b", "row_index": 101, "timestamp": "2018-04-17T19:01:56Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db04ddf-f5f3-4fbd-8246-7c150279e805b", "eventTime": "2018-04-17T19:01:56Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "459126e-5032-452b-8f11-f640d88c7968", "record_id": "flaws_cloudtrail:0000102:459126e-5032-452b-8f11-f640d88c7968", "row_index": 102, "timestamp": "2018-04-17T19:01:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "459126e-5032-452b-8f11-f640d88c7968", "eventTime": "2018-04-17T19:01:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d757322c-400b-401b-8d04-72d9d0ccd26d", "record_id": "flaws_cloudtrail:0000103:4d757322c-400b-401b-8d04-72d9d0ccd26d", "row_index": 103, "timestamp": "2018-04-17T19:01:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d757322c-400b-401b-8d04-72d9d0ccd26d", "eventTime": "2018-04-17T19:01:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b8cbff-91d6-4715-9fae-edba4ad6930f", "record_id": "flaws_cloudtrail:0000104:79b8cbff-91d6-4715-9fae-edba4ad6930f", "row_index": 104, "timestamp": "2018-04-17T19:01:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b8cbff-91d6-4715-9fae-edba4ad6930f", "eventTime": "2018-04-17T19:01:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162c991d-d48d-4d6e-904b-720653d7d972", "record_id": "flaws_cloudtrail:0000105:162c991d-d48d-4d6e-904b-720653d7d972", "row_index": 105, "timestamp": "2018-04-17T19:01:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162c991d-d48d-4d6e-904b-720653d7d972", "eventTime": "2018-04-17T19:01:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5Epf-rLBKZPIZuPqPRn79NERHwX5rjbdBR2BRqgEjv27DWZGtZnk11uHSe7xdeY32jjZvoXiHThecVTJIBSdl641fj6fNwr1017TuQAaY1snD3EC89vP6tC03yg0a1wKCL69UT952kLk7x2MYfKDaQFbBkNHMFrMQB2OhbM3fX5DBCoBqMmkOBDc4gcmBIToMd4J5MDToT-g1Tp0fsmBGlgIMZ7D4RASvV-jSuFBjprTInUOvkS_rBiwg2Yn-lsGUfTl17qVfQS69evRfq0hoeTo3EG0sf0TzChubcKzZYYxOZbG5DTGRsa5_3YkH8Vx5FUzgn6BKbrLIy4wHgeEgCkLPtXKoPfI0xtY-NsfhEmpT8TT7KghmXGWi3XVgoICrV3CKJ40hR2HeUhjR8gSjKbCZeWQSNBTQDs3FfQRRkFmkPup6JjAx8GnOLrfhulWMmNQcn80-Cphou7c-2VeK8CAWe52n_gccYd2K3uKe4aOUUgl60NbfvvbZsmgLrKs0LK_1Gb5PR4vy22X31KCvUmGPM8qiAnhW7J7ZKFtm8yb3h_bL523xuyrssElqfVFuEG2avZPW5EN7vBFeE0v-Yl87Mu-8bk8cLf8gapGUgWJ4gUHQTJjd6qCvWbBUGisxzQIKxz8Apra4f67j_-LPL29etG8ZgaIDoI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c359c1c2-0e57-43fb-bfdd-57a8dc5e56b6", "record_id": "flaws_cloudtrail:0000106:c359c1c2-0e57-43fb-bfdd-57a8dc5e56b6", "row_index": 106, "timestamp": "2018-04-17T19:01:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c359c1c2-0e57-43fb-bfdd-57a8dc5e56b6", "eventTime": "2018-04-17T19:01:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bf687d-2e45-4a46-8163-069b51e6a044", "record_id": "flaws_cloudtrail:0000107:53bf687d-2e45-4a46-8163-069b51e6a044", "row_index": 107, "timestamp": "2018-04-17T19:01:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bf687d-2e45-4a46-8163-069b51e6a044", "eventTime": "2018-04-17T19:01:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af608c9-837f-466b-bd7f-4a73cf05b1b9", "record_id": "flaws_cloudtrail:0000108:6af608c9-837f-466b-bd7f-4a73cf05b1b9", "row_index": 108, "timestamp": "2018-04-17T19:01:59Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af608c9-837f-466b-bd7f-4a73cf05b1b9", "eventTime": "2018-04-17T19:01:59Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5461cd-f8a5-4fcd-9fd8-af5bf77ed8ba", "record_id": "flaws_cloudtrail:0000109:1a5461cd-f8a5-4fcd-9fd8-af5bf77ed8ba", "row_index": 109, "timestamp": "2018-04-17T19:01:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5461cd-f8a5-4fcd-9fd8-af5bf77ed8ba", "eventTime": "2018-04-17T19:01:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5a31e88-f503-45d7-a2aa-250bb5710de7", "record_id": "flaws_cloudtrail:0000110:b5a31e88-f503-45d7-a2aa-250bb5710de7", "row_index": 110, "timestamp": "2018-04-17T19:02:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5a31e88-f503-45d7-a2aa-250bb5710de7", "eventTime": "2018-04-17T19:02:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b352c51-19aa-4004-9f8c-2d7deff1161d", "record_id": "flaws_cloudtrail:0000111:0b352c51-19aa-4004-9f8c-2d7deff1161d", "row_index": 111, "timestamp": "2018-04-17T19:02:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b352c51-19aa-4004-9f8c-2d7deff1161d", "eventTime": "2018-04-17T19:02:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eaf1813-a5d8-4aed-a324-a732cfa572d4", "record_id": "flaws_cloudtrail:0000112:2eaf1813-a5d8-4aed-a324-a732cfa572d4", "row_index": 112, "timestamp": "2018-04-17T19:02:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eaf1813-a5d8-4aed-a324-a732cfa572d4", "eventTime": "2018-04-17T19:02:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff80c1bd-a1b3-4589-8f18-d3ba7eb7651f", "record_id": "flaws_cloudtrail:0000113:ff80c1bd-a1b3-4589-8f18-d3ba7eb7651f", "row_index": 113, "timestamp": "2018-04-17T19:02:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff80c1bd-a1b3-4589-8f18-d3ba7eb7651f", "eventTime": "2018-04-17T19:02:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c39a300a-f94c-4942-84fc-5b17d6896e5b", "record_id": "flaws_cloudtrail:0000114:c39a300a-f94c-4942-84fc-5b17d6896e5b", "row_index": 114, "timestamp": "2018-04-17T19:02:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c39a300a-f94c-4942-84fc-5b17d6896e5b", "eventTime": "2018-04-17T19:02:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "634305e5c-f931-4b7a-bda6-3b301cecd916", "record_id": "flaws_cloudtrail:0000115:634305e5c-f931-4b7a-bda6-3b301cecd916", "row_index": 115, "timestamp": "2018-04-17T19:02:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "634305e5c-f931-4b7a-bda6-3b301cecd916", "eventTime": "2018-04-17T19:02:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38546eb2-35f0-4e85-ae9f-a912bf336ad8", "record_id": "flaws_cloudtrail:0000116:38546eb2-35f0-4e85-ae9f-a912bf336ad8", "row_index": 116, "timestamp": "2018-04-17T19:02:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38546eb2-35f0-4e85-ae9f-a912bf336ad8", "eventTime": "2018-04-17T19:02:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd93f91d-b0ea-4a08-9043-6bd74c658ec8", "record_id": "flaws_cloudtrail:0000117:bd93f91d-b0ea-4a08-9043-6bd74c658ec8", "row_index": 117, "timestamp": "2018-04-17T19:02:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd93f91d-b0ea-4a08-9043-6bd74c658ec8", "eventTime": "2018-04-17T19:02:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KNkYjptNyUeIQ_uYZGA-GHbGK59Z95Cy_HHUG85_Wh3XU-4ApxVf1SQPReCKqP9bnuGZm7UBXG5e8l2oIwHnW5EDM_X2Y-eoBL71Q1Os4VYBnr0R7jNoNDjVcj3Ohrkk2QaGZVc5TtEDFFytP6zG3GIrnWZ5bS-D6K0T457NQ_HvSHzoj_Quclx04N_MWyDPoTxIaXG5OZTrtsckHwVaDBg80_IDi0x07BoCcC8qbiCGyaAdx4FBxiQ7kqqNxOBj7nXF9XVQBHSaPlweqbQUVDmAY3uJgA1NNuG9uOJG9t0t0MoAYu8Yx5RIJqD_zTTv13uxA1pdgol1ctRkZ8UghJSqO1jtTLhfBZn1NmciWCnCuiLYjgi185WdRxCAv-_GR9Fk0ITc9wkvyCgBW3PtkZ0zgyD5Mhh5OhJcvH3JOGnU_74gZsKkGpYbPNLitnMkW4DcLqFu10a6TLbXU2Rp1FQE3a7HzSDelGt_S3mT4TGfHxMhfxnlJravXKgIwdgH5kMtXWKS1RDI2vndg7KLyoUUwLYK9Zv1G0adadwLYFjoHMxNt8DqoKtxwPmVkLk8C4nIhyPwdlPa2FDKNTHXUk5tILoSh7zXX72UA6Pn7sqGjaVbsGooO0Dx5f_OoWIUv7ny2AvsPaOq4UIRNIts3Z2Hu_LL7DVKtQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb44c09-ba87-4706-b380-106040bc3aa70", "record_id": "flaws_cloudtrail:0000118:6fb44c09-ba87-4706-b380-106040bc3aa70", "row_index": 118, "timestamp": "2018-04-17T19:02:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb44c09-ba87-4706-b380-106040bc3aa70", "eventTime": "2018-04-17T19:02:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9457b8-3831-40f2-9e7d-da582ecae57f", "record_id": "flaws_cloudtrail:0000119:4e9457b8-3831-40f2-9e7d-da582ecae57f", "row_index": 119, "timestamp": "2018-04-17T19:02:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9457b8-3831-40f2-9e7d-da582ecae57f", "eventTime": "2018-04-17T19:02:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c355d52d-ad3a-4eb5-8145-8f89ef1c18d2", "record_id": "flaws_cloudtrail:0000120:c355d52d-ad3a-4eb5-8145-8f89ef1c18d2", "row_index": 120, "timestamp": "2018-04-17T19:02:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c355d52d-ad3a-4eb5-8145-8f89ef1c18d2", "eventTime": "2018-04-17T19:02:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f602038-8a7f-4fe2-99f6-9396c67b0b3c", "record_id": "flaws_cloudtrail:0000121:f602038-8a7f-4fe2-99f6-9396c67b0b3c", "row_index": 121, "timestamp": "2018-04-17T19:02:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f602038-8a7f-4fe2-99f6-9396c67b0b3c", "eventTime": "2018-04-17T19:02:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c061365c6-2fce-48a4-b79b-f040726aad3f", "record_id": "flaws_cloudtrail:0000122:c061365c6-2fce-48a4-b79b-f040726aad3f", "row_index": 122, "timestamp": "2018-04-17T19:02:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c061365c6-2fce-48a4-b79b-f040726aad3f", "eventTime": "2018-04-17T19:02:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18000d-2527-48b1-8235-c2d8db4f5def", "record_id": "flaws_cloudtrail:0000123:18000d-2527-48b1-8235-c2d8db4f5def", "row_index": 123, "timestamp": "2018-04-17T19:02:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18000d-2527-48b1-8235-c2d8db4f5def", "eventTime": "2018-04-17T19:02:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82839-4a50-4b13-a5e5-b2e518516abc9", "record_id": "flaws_cloudtrail:0000124:b82839-4a50-4b13-a5e5-b2e518516abc9", "row_index": 124, "timestamp": "2018-04-17T19:02:03Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82839-4a50-4b13-a5e5-b2e518516abc9", "eventTime": "2018-04-17T19:02:03Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78c1b0f4-0ca0-4f9a-8eef-f8d8650d8789", "record_id": "flaws_cloudtrail:0000125:78c1b0f4-0ca0-4f9a-8eef-f8d8650d8789", "row_index": 125, "timestamp": "2018-04-17T19:02:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78c1b0f4-0ca0-4f9a-8eef-f8d8650d8789", "eventTime": "2018-04-17T19:02:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "900f58a4-6f3b-4e6c-8194-fbb8bf7775da", "record_id": "flaws_cloudtrail:0000126:900f58a4-6f3b-4e6c-8194-fbb8bf7775da", "row_index": 126, "timestamp": "2018-04-17T19:02:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "900f58a4-6f3b-4e6c-8194-fbb8bf7775da", "eventTime": "2018-04-17T19:02:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd64c6bb-2e29-4de9-9e79-d06f9b279b14", "record_id": "flaws_cloudtrail:0000127:fd64c6bb-2e29-4de9-9e79-d06f9b279b14", "row_index": 127, "timestamp": "2018-04-17T19:02:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd64c6bb-2e29-4de9-9e79-d06f9b279b14", "eventTime": "2018-04-17T19:02:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da9c22ce-5e26-4fe5-8b79-55a4dc1ff9dc", "record_id": "flaws_cloudtrail:0000128:da9c22ce-5e26-4fe5-8b79-55a4dc1ff9dc", "row_index": 128, "timestamp": "2018-04-17T19:02:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da9c22ce-5e26-4fe5-8b79-55a4dc1ff9dc", "eventTime": "2018-04-17T19:02:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce45814-068a-472d-80aa-c72050c87118", "record_id": "flaws_cloudtrail:0000129:ce45814-068a-472d-80aa-c72050c87118", "row_index": 129, "timestamp": "2018-04-17T19:02:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce45814-068a-472d-80aa-c72050c87118", "eventTime": "2018-04-17T19:02:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c99756e-b974-4361-a543-be29e782a2ed", "record_id": "flaws_cloudtrail:0000130:3c99756e-b974-4361-a543-be29e782a2ed", "row_index": 130, "timestamp": "2018-04-17T19:02:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c99756e-b974-4361-a543-be29e782a2ed", "eventTime": "2018-04-17T19:02:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497d0c52-fc12-4626-8e48-520660e3", "record_id": "flaws_cloudtrail:0000131:497d0c52-fc12-4626-8e48-520660e3", "row_index": 131, "timestamp": "2018-04-17T19:02:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497d0c52-fc12-4626-8e48-520660e3", "eventTime": "2018-04-17T19:02:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: lGJO7CeWF35Ch2Dg2UTOog-dLoYpm60EzL9NbkWNKrjXnPr874W417YO4EQJtZtGemhQaMSt0yhk3orsD3LVwEeWCzwbq_EWhVXwJjmc-oPYN5FhVqNDuB7oHxhJj6uUmZeVbzYYyAtoxtotN7HRKUJzL7zPWOSmcWJqYYaiVF1_2UNk9X-HmxgtvyInm4YnXXYTptgurxuwPMP2Oi_di6BXErvTcz9ao0K1qgHr5XdA7V9JCSQ63HAlCHggzA3usYXfhdpNwUdlBOIDBisGt1b8nkTwDpqPP2Nf2roSQ1M_mufhnQdgUujru_b5_dF8a28Ukw0CQXfMPw_ZdbtT03kCqvlU_mNgIRqkSmhGHr7P8s_OqrfxAg44OxkTWCeoiKNoUSQ9baffC9105zWF7uHerahdIx6hi90Z0kVtIH1YX4nrB5bSoXqYKWNC0_bOKtkUiF1A9vwF3w8CrwabyaHzZ3i19oObgvIWRZL0zbKqfy3abT4jlGKIbG2kYYSjV0_aa7bldY004PEmqeBXZ3Jg9E-NdPSAfQQGxNt9JbJINR5WAb8w2TCc7Uddq6LH0V0uFpQPZD2VIZDp-sNlK13Zr5UZcfuwLJ-bVEdEWFO6mm1FfNhXI9igYl2hjsCvfESlkOwjSZv4jwtiMup-1AZrW7rYtgr_bA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d26dbadf-600b-453d-bdcc-2c891ffe1ba0", "record_id": "flaws_cloudtrail:0000132:d26dbadf-600b-453d-bdcc-2c891ffe1ba0", "row_index": 132, "timestamp": "2018-04-17T19:02:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d26dbadf-600b-453d-bdcc-2c891ffe1ba0", "eventTime": "2018-04-17T19:02:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4dae4b-c825-4e5d-95af-789abf412112", "record_id": "flaws_cloudtrail:0000133:bc4dae4b-c825-4e5d-95af-789abf412112", "row_index": 133, "timestamp": "2018-04-17T19:02:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1830, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4dae4b-c825-4e5d-95af-789abf412112", "eventTime": "2018-04-17T19:02:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: K4JPaL4E9dDqNk0g79fFsiOuFEiE6NiaAa8P7Sp-PRfc3bctEwiNap_ye0oHHqT1T-qwpNdtFu2jLcm9JTTW2k456YNyoKGnYYausXdulUqQVhsdGJ6dZrCi5e7vP6Qh_Pxs0edlPMrI0953aD8MqOlVgQExldKXGRardZc0Q7O1uKm13NawcloqUcUu8rcXiSbCiwLscLaNZ79z_sLGkSrxRP6iNN795GyMn5Zr0S8Hl-0j7cYtmFFJx2NumJpwqoDZui1d26jeI_nP9KxVei8chqd-STkleX2w6i4BZtEfErSp9ptKsUxZ9wnDGTLbpGnbiVxa5w86N4ffHG2k9gi82lrm5vfDx-ITu9Nysnh0iJNcwkYsuE3eunrZdqUO5oo68KKo2i9Ks3kJYX9rfqCNhROu8ixLOyJ8X2d6vwN_9RIPCmcMfa77docMF3_GiMTPyXKvjyW6QQozdV3E9fJst0jmpy-tzh-pR-AMyYpTtt093FD3qo1brP417ezIa-sj3VvBA0saBdrWal4ukWSdZ5ekxPRwDKpl0355jv3bYdUdtu5LcTkEF42G9F2uVwPDcdd9rfcahWxCnLZhLks3eGob_hivVlVHsCjZl6nQMcqLEo4BKXywHFL2h9YJJPv8TTpVjvthm7pf7fegdhWOUy7L8DH903Jz", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c0d8951-61ba-472c-b467-0dd80cde2237", "record_id": "flaws_cloudtrail:0000134:8c0d8951-61ba-472c-b467-0dd80cde2237", "row_index": 134, "timestamp": "2018-04-17T19:02:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1829, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c0d8951-61ba-472c-b467-0dd80cde2237", "eventTime": "2018-04-17T19:02:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RHKX9aeOuwwUD-0_dMXB0sZQTxMbN3PvLdH0-Uzr9Y3yF-YU03b60eKeDaf_m1WIWQDspiJ5AFJZvqPd_DuyvwyDYZE-CF2Are8yVUWQ-C9kQtBVhgzqqtfRXqV4VKaQJr6D1cyHBs6kuCi0eI3mkzAUl5_NlUpiypfxGNl1_MXawTnBaSBRpsBftRFblCAkIDgHCuEz3rns1aSXbZiLj88CK2cW64Y0Hmfv-fEI3pmbjrlY0a8ANheU2pNV3_UGaCmLeG-CpzwQV_8hLjMNJ6H3idDDOuCD0_TIF_pF1A3tpsqatCOuQJtqBzHm0HI_s6QBHhigr03FQdW57pZEsSr_A3AiKoFG8FdPCvP-lww8OlIGJIF-ZJiM_U5J4jQ-Z7AuSjPDrHkNlOgtLYrMlmjaM35u1ErzeaFtNPj7hmfKrqPTTa3GK5o6JW3Yt1RvDPlswd5HlwHTFL5IuXoLKEtHlbjnMJMj1OfIVTdgtKG9r3-xFQyQi-0adkqM0M6Z4m3H_TzEN4CnfoZAaK1TuuhDIVItoLcIeilHiomXsCR4NQRdG14VrMPItzt_DMKgZ57yWf8rT9TvdaRE_LDxm7Rv2nfB-intpBSshCLQC74vVzi7VuQMM_OK7mF_-7bir5MygRxY04KoJ7deNtd6r5HIezN0SY50zwk-", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3d973682-bb94-4cdb-aaba-fa2f79871130", "record_id": "flaws_cloudtrail:0000135:b3d973682-bb94-4cdb-aaba-fa2f79871130", "row_index": 135, "timestamp": "2018-04-17T19:02:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3d973682-bb94-4cdb-aaba-fa2f79871130", "eventTime": "2018-04-17T19:02:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3153cf84-60c8-4c44-98fe-9085c3f68d89", "record_id": "flaws_cloudtrail:0000136:3153cf84-60c8-4c44-98fe-9085c3f68d89", "row_index": 136, "timestamp": "2018-04-17T19:02:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3153cf84-60c8-4c44-98fe-9085c3f68d89", "eventTime": "2018-04-17T19:02:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "185bdad7-845f-42e1-be9a-835fe5c89579", "record_id": "flaws_cloudtrail:0000137:185bdad7-845f-42e1-be9a-835fe5c89579", "row_index": 137, "timestamp": "2018-04-17T19:02:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "185bdad7-845f-42e1-be9a-835fe5c89579", "eventTime": "2018-04-17T19:02:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9996c5-e768-4959-a991-7bfeb968cc9f", "record_id": "flaws_cloudtrail:0000138:4b9996c5-e768-4959-a991-7bfeb968cc9f", "row_index": 138, "timestamp": "2018-04-17T19:02:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9996c5-e768-4959-a991-7bfeb968cc9f", "eventTime": "2018-04-17T19:02:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2fea2f1-55b6-4349-a925-c541307fa95c", "record_id": "flaws_cloudtrail:0000139:a2fea2f1-55b6-4349-a925-c541307fa95c", "row_index": 139, "timestamp": "2018-04-17T19:02:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2fea2f1-55b6-4349-a925-c541307fa95c", "eventTime": "2018-04-17T19:02:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41181a-541b-4abf-af6d-6fc904e6a539", "record_id": "flaws_cloudtrail:0000140:41181a-541b-4abf-af6d-6fc904e6a539", "row_index": 140, "timestamp": "2018-04-17T19:02:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41181a-541b-4abf-af6d-6fc904e6a539", "eventTime": "2018-04-17T19:02:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb1b903-8d7a-4153-a65f-c4fa33a0235c", "record_id": "flaws_cloudtrail:0000141:6eb1b903-8d7a-4153-a65f-c4fa33a0235c", "row_index": 141, "timestamp": "2018-04-17T19:02:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb1b903-8d7a-4153-a65f-c4fa33a0235c", "eventTime": "2018-04-17T19:02:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "338332d6c-6dfc-4119-9715-58d87d7ac059", "record_id": "flaws_cloudtrail:0000142:338332d6c-6dfc-4119-9715-58d87d7ac059", "row_index": 142, "timestamp": "2018-04-17T19:02:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "338332d6c-6dfc-4119-9715-58d87d7ac059", "eventTime": "2018-04-17T19:02:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 42CWMYc2gRpXLjdMv4MZMbhcvA-w-Jdm4FFzJwJMDSPwLzI4OtuK8g4ZPnz5PyqfaQf8y4KGPNR8mrAGhE2X9yiCP3IZt2EpbQSInQXeH1UfIK9vYvHGI4o3h8Iv-EubcbGbOMvfywU8z1cwbzaxXxagMBQhhtc25n-pgWize2k9DjS_tbjqhMSPlzUj6zQ4Cndf3vSSjzXK-jYAzErcf5OETR7R11JTV-YtEDCtXLOi3hY46YoQATZtvWqPVUuPySVHCCjlwHQEzEt-O1aT7uuwgSEk2bJrlBHbf1G2kw23ncE6AQVxiGVV7ccUz3AhnPNE1321FWFGHS3ZqkjiVFvJkJ8MEM8q7rt4RCxlc0IDcAGwhnGMgth7wqJvmclqeMC1IHgmx7D70gCo3ubwIwTw4oR0LrSoaQ6nkG6W7dnxxd-JUqxGPRnWHtL8wDFbhb69uejq46nIvzLfHPO3kxxulrLg-yyPTip6gEDY_y45W9aklf1pShNHml__V8cQCZlLTEtwnTsaDKx482Z3obHrStxIJgA27nlrBGWYvgcOCrAOoOx5ZsKBUyHZhxzqBtSWOVrbb-xr6hxmGzE-naQpJ-wrpqbB2mW9nboNvOmNuQ-A8Sin5vEOyIYZqL4WJ_d4FDHzSJu5V4U1K-jC90yMd10rDQ7-fg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a73287c-4cd6-4e15-a880-24edb124eb0a", "record_id": "flaws_cloudtrail:0000143:a73287c-4cd6-4e15-a880-24edb124eb0a", "row_index": 143, "timestamp": "2018-04-17T19:02:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a73287c-4cd6-4e15-a880-24edb124eb0a", "eventTime": "2018-04-17T19:02:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "699e5acc-180b-48ed-bfe0-c861fad8cbb2", "record_id": "flaws_cloudtrail:0000144:699e5acc-180b-48ed-bfe0-c861fad8cbb2", "row_index": 144, "timestamp": "2018-04-17T19:02:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "699e5acc-180b-48ed-bfe0-c861fad8cbb2", "eventTime": "2018-04-17T19:02:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70a7c880-77f6-4186-966f-b47c9b9763f5", "record_id": "flaws_cloudtrail:0000145:70a7c880-77f6-4186-966f-b47c9b9763f5", "row_index": 145, "timestamp": "2018-04-17T19:02:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70a7c880-77f6-4186-966f-b47c9b9763f5", "eventTime": "2018-04-17T19:02:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: RRprn4OL7d_cCg1_4sCY0TvMLlSIYgn5OWczcq8iLFVCmJ4ywAb4Hwb4MUyFMOnPyzkMCRY3TxyYJTdT_h4HCQlXXEqhxAWvQj-mMix1f5LFjtMM2uHI3ab4UzHMTHka8jekOUmEySA56MfXbYQs2nC3kHNM1_MQwGnkwYPu6wqY98ZAZblP_yPZ1t33Ttj_KxLHuTBu7XmNiJPKW68y5aSKLn7CqFVoEY0DOreSAXb4imHgBsmcRUrRmOkavQtbrsMJf0gVYxBCZBSZ2sf9QcBrh_KxrqNddaoIL42ReEy1ueh9ef_rTnWazprXPmfzFRMMkOb37qyixJ19vfB_ZfUxMtMTX4bDvT6137YwLr2AEYpinYswpi-f039awFSGbTjk7tVZW62B15u_yquuTY3882gTDq5ji0YjKqE4hsUy0tKZkByIhZVh6IvNtrKmrnu_HDHSDB6HWZCRKP_E9xtcYXr8W9sgOxXpYPEJjFVfEE8Qv9FiXCZ-ORx6LE5P1PedUqUaLLkb91gHNTIpQUv1borqhWDBb8UzexNeqmaglA-HGxkcYfG9lg3LjAwGLAIKGVdOK74a4UQBOB-3bUZVsh1nEC9WHfVWC9-ElV-OAgvCg8VIgjgzobUvNYU8XE_Z7bO4UIBgu2jhHzsyO3LXo2ja5fmNKqk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e417f899-d34c-4a76-b706-7b642b834269a", "record_id": "flaws_cloudtrail:0000146:e417f899-d34c-4a76-b706-7b642b834269a", "row_index": 146, "timestamp": "2018-04-17T19:13:18Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e417f899-d34c-4a76-b706-7b642b834269a", "eventTime": "2018-04-17T19:13:18Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b313b9b7-d3f1-4b46-96bb-d8ef5c621fc5", "record_id": "flaws_cloudtrail:0000147:b313b9b7-d3f1-4b46-96bb-d8ef5c621fc5", "row_index": 147, "timestamp": "2018-04-17T19:13:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b313b9b7-d3f1-4b46-96bb-d8ef5c621fc5", "eventTime": "2018-04-17T19:13:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289a4952-e838-4ede-bf93-efe2693bef9b", "record_id": "flaws_cloudtrail:0000148:289a4952-e838-4ede-bf93-efe2693bef9b", "row_index": 148, "timestamp": "2018-04-17T19:13:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289a4952-e838-4ede-bf93-efe2693bef9b", "eventTime": "2018-04-17T19:13:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6ed3342-14a5-4dab-8dba-a9bb93594f1e", "record_id": "flaws_cloudtrail:0000149:a6ed3342-14a5-4dab-8dba-a9bb93594f1e", "row_index": 149, "timestamp": "2018-04-17T19:13:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6ed3342-14a5-4dab-8dba-a9bb93594f1e", "eventTime": "2018-04-17T19:13:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034aef0e-5dbd-4137-b43e-edd34cd99c1a", "record_id": "flaws_cloudtrail:0000150:034aef0e-5dbd-4137-b43e-edd34cd99c1a", "row_index": 150, "timestamp": "2018-04-17T19:13:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034aef0e-5dbd-4137-b43e-edd34cd99c1a", "eventTime": "2018-04-17T19:13:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b191b006-d826-4874-81d0-8fc82fb0ee74", "record_id": "flaws_cloudtrail:0000151:b191b006-d826-4874-81d0-8fc82fb0ee74", "row_index": 151, "timestamp": "2018-04-17T19:13:21Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b191b006-d826-4874-81d0-8fc82fb0ee74", "eventTime": "2018-04-17T19:13:21Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82747b-a0ae-4fad-b808-b4472e1fb47c", "record_id": "flaws_cloudtrail:0000152:82747b-a0ae-4fad-b808-b4472e1fb47c", "row_index": 152, "timestamp": "2018-04-17T19:13:22Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82747b-a0ae-4fad-b808-b4472e1fb47c", "eventTime": "2018-04-17T19:13:22Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02cc9cb9-8ca8-48a2-876d-7a964364c4cf", "record_id": "flaws_cloudtrail:0000153:02cc9cb9-8ca8-48a2-876d-7a964364c4cf", "row_index": 153, "timestamp": "2018-04-17T19:13:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02cc9cb9-8ca8-48a2-876d-7a964364c4cf", "eventTime": "2018-04-17T19:13:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbf68d4-7c75-49f7-8408-376775d9b4de", "record_id": "flaws_cloudtrail:0000154:1fbf68d4-7c75-49f7-8408-376775d9b4de", "row_index": 154, "timestamp": "2018-04-17T19:13:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbf68d4-7c75-49f7-8408-376775d9b4de", "eventTime": "2018-04-17T19:13:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201ede0a-9398-4d9a-bff0-cca8aedcfaef", "record_id": "flaws_cloudtrail:0000155:201ede0a-9398-4d9a-bff0-cca8aedcfaef", "row_index": 155, "timestamp": "2018-04-17T19:13:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201ede0a-9398-4d9a-bff0-cca8aedcfaef", "eventTime": "2018-04-17T19:13:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c1da098-559b-4efb-b585-bc92121da", "record_id": "flaws_cloudtrail:0000156:7c1da098-559b-4efb-b585-bc92121da", "row_index": 156, "timestamp": "2018-04-17T19:13:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c1da098-559b-4efb-b585-bc92121da", "eventTime": "2018-04-17T19:13:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d8efd5-978f-4141-a2f5-9640c438dd4e", "record_id": "flaws_cloudtrail:0000157:a0d8efd5-978f-4141-a2f5-9640c438dd4e", "row_index": 157, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d8efd5-978f-4141-a2f5-9640c438dd4e", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9780d1e-1f1d-4566-af81-ac9d0d14a78b", "record_id": "flaws_cloudtrail:0000158:a9780d1e-1f1d-4566-af81-ac9d0d14a78b", "row_index": 158, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9780d1e-1f1d-4566-af81-ac9d0d14a78b", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fdf80dc-0405-4f26-9904-f78bc9a64009", "record_id": "flaws_cloudtrail:0000159:7fdf80dc-0405-4f26-9904-f78bc9a64009", "row_index": 159, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fdf80dc-0405-4f26-9904-f78bc9a64009", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4228ce87-2c72-4617-982a-9c666107dc52", "record_id": "flaws_cloudtrail:0000160:4228ce87-2c72-4617-982a-9c666107dc52", "row_index": 160, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4228ce87-2c72-4617-982a-9c666107dc52", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c93ebb0-f804-48ee-a759-5d187666", "record_id": "flaws_cloudtrail:0000161:7c93ebb0-f804-48ee-a759-5d187666", "row_index": 161, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c93ebb0-f804-48ee-a759-5d187666", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8457a028-f981-4111-bdc0-e7bd3a85d4db", "record_id": "flaws_cloudtrail:0000162:8457a028-f981-4111-bdc0-e7bd3a85d4db", "row_index": 162, "timestamp": "2018-04-17T19:13:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8457a028-f981-4111-bdc0-e7bd3a85d4db", "eventTime": "2018-04-17T19:13:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbff25cb-9fcf-4952-a7d9-d4a54e000d59", "record_id": "flaws_cloudtrail:0000163:fbff25cb-9fcf-4952-a7d9-d4a54e000d59", "row_index": 163, "timestamp": "2018-04-17T19:13:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbff25cb-9fcf-4952-a7d9-d4a54e000d59", "eventTime": "2018-04-17T19:13:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57ce32c3-4755-43cb-87b4-ba430139f2", "record_id": "flaws_cloudtrail:0000164:57ce32c3-4755-43cb-87b4-ba430139f2", "row_index": 164, "timestamp": "2018-04-17T19:13:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57ce32c3-4755-43cb-87b4-ba430139f2", "eventTime": "2018-04-17T19:13:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a62f43-00d5-4fc1-88c7-6d96bdfa8d7d", "record_id": "flaws_cloudtrail:0000165:a1a62f43-00d5-4fc1-88c7-6d96bdfa8d7d", "row_index": 165, "timestamp": "2018-04-17T19:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a62f43-00d5-4fc1-88c7-6d96bdfa8d7d", "eventTime": "2018-04-17T19:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4166f028-71d1-4b86-bc93-4a9fc8bf482a", "record_id": "flaws_cloudtrail:0000166:4166f028-71d1-4b86-bc93-4a9fc8bf482a", "row_index": 166, "timestamp": "2018-04-17T19:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4166f028-71d1-4b86-bc93-4a9fc8bf482a", "eventTime": "2018-04-17T19:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79a2134b-2b74-4f6b-a254-21a045633d", "record_id": "flaws_cloudtrail:0000167:79a2134b-2b74-4f6b-a254-21a045633d", "row_index": 167, "timestamp": "2018-04-17T19:13:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79a2134b-2b74-4f6b-a254-21a045633d", "eventTime": "2018-04-17T19:13:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a19efd5-f0f7-4bc5-b7da-1fe8487000e6", "record_id": "flaws_cloudtrail:0000168:8a19efd5-f0f7-4bc5-b7da-1fe8487000e6", "row_index": 168, "timestamp": "2018-04-17T19:13:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a19efd5-f0f7-4bc5-b7da-1fe8487000e6", "eventTime": "2018-04-17T19:13:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d76eeb28-ceed-436e-82b9-cfc1d388980", "record_id": "flaws_cloudtrail:0000169:d76eeb28-ceed-436e-82b9-cfc1d388980", "row_index": 169, "timestamp": "2018-04-17T19:13:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d76eeb28-ceed-436e-82b9-cfc1d388980", "eventTime": "2018-04-17T19:13:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "842c1a63-650e-49df-9fa9-995da1fb7e86", "record_id": "flaws_cloudtrail:0000170:842c1a63-650e-49df-9fa9-995da1fb7e86", "row_index": 170, "timestamp": "2018-04-17T19:13:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "842c1a63-650e-49df-9fa9-995da1fb7e86", "eventTime": "2018-04-17T19:13:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73b948059-487b-467e-baa6-3e8ff1e0f583", "record_id": "flaws_cloudtrail:0000171:73b948059-487b-467e-baa6-3e8ff1e0f583", "row_index": 171, "timestamp": "2018-04-17T19:13:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73b948059-487b-467e-baa6-3e8ff1e0f583", "eventTime": "2018-04-17T19:13:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393404-9b17-409b-aa3e-a79e124964d4", "record_id": "flaws_cloudtrail:0000172:393404-9b17-409b-aa3e-a79e124964d4", "row_index": 172, "timestamp": "2018-04-17T19:13:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393404-9b17-409b-aa3e-a79e124964d4", "eventTime": "2018-04-17T19:13:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1791c054-1a9d-44d9-aeeb-db7fbf7df93d", "record_id": "flaws_cloudtrail:0000173:1791c054-1a9d-44d9-aeeb-db7fbf7df93d", "row_index": 173, "timestamp": "2018-04-17T19:13:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1791c054-1a9d-44d9-aeeb-db7fbf7df93d", "eventTime": "2018-04-17T19:13:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24243af-b12c-4fa4-b96e-2fc3d16fc7d5", "record_id": "flaws_cloudtrail:0000174:24243af-b12c-4fa4-b96e-2fc3d16fc7d5", "row_index": 174, "timestamp": "2018-04-17T19:13:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24243af-b12c-4fa4-b96e-2fc3d16fc7d5", "eventTime": "2018-04-17T19:13:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54bbd22a-7b2b-4c63-8354-177f624ec24c", "record_id": "flaws_cloudtrail:0000175:54bbd22a-7b2b-4c63-8354-177f624ec24c", "row_index": 175, "timestamp": "2018-04-17T19:13:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54bbd22a-7b2b-4c63-8354-177f624ec24c", "eventTime": "2018-04-17T19:13:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478587b4-0af1-4e8f-98ff-fc4224c8cf91", "record_id": "flaws_cloudtrail:0000176:478587b4-0af1-4e8f-98ff-fc4224c8cf91", "row_index": 176, "timestamp": "2018-04-17T19:13:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478587b4-0af1-4e8f-98ff-fc4224c8cf91", "eventTime": "2018-04-17T19:13:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IjXThxVQFQWMygpi9j_2WA5p7HES6qPsBvpNSWygQhJ0Q6nfu7NJNnj9MsW5NhVwQIQ8efPZ6v4A4j0FcGjiod6cSQTPUgUB8QaLCAjOkM0beOSweQX8IhifK0ucvnaS9vNxjCYtJ7u_p9b7Vmz6KKKnwxeCzJ39XQZTijq1l3ksZC5PYnaHYUFXvgmaXgnDWgUCHIjNUMIaVe1KAHdfDKzU4xf4PjJXVyoFg3LnVDHAYpsHe1zZrwub5upBRWEPqAxXV2I0c3FvaM4hX19sZ2bq1knrcuuKcxzR_8koEM3gcUC_3Yy5OmBsqhLxQTKROu9W7a9Sa2vbUOi7qt9qMvM7wxePmjAqzA_YnYfYcd6HeAofxeNFTackgKCpOXMXx6XggoC_18LAOrrNL_sseArVnzQbsqm-UlJKLJSYiwImmKXmhUjAhQqmCbomyQky20xfmpsbRtCfQlu7HJ4455ZD7N4BhyC7FTdGv6s_9CstH5J1Y68mnv886384HSaBKmzsyFnA1ukPsk9kf-FaL54rUYLbMSVXy5jCuwkSMFGYe2o-qsrPp2z2K35joO9h57f3atSp23htXBmhEjxZbmazdPEkLJI0P_uUPu02X2Rykvq6lFQUF4pwniq9BZ0rwNE-dBUJzojEKEl9MD0vAEDsf4R9dms028WmqUqJ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f70e2ca-7b7d-4720-be36-acd134703f2ab", "record_id": "flaws_cloudtrail:0000177:2f70e2ca-7b7d-4720-be36-acd134703f2ab", "row_index": 177, "timestamp": "2018-04-17T19:13:30Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f70e2ca-7b7d-4720-be36-acd134703f2ab", "eventTime": "2018-04-17T19:13:30Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a937ccc9-9204-4226-b986-829ccbf14a4e", "record_id": "flaws_cloudtrail:0000178:a937ccc9-9204-4226-b986-829ccbf14a4e", "row_index": 178, "timestamp": "2018-04-17T19:13:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a937ccc9-9204-4226-b986-829ccbf14a4e", "eventTime": "2018-04-17T19:13:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e38d1421-43de-4f52-96ba-1496cab02e8d", "record_id": "flaws_cloudtrail:0000179:e38d1421-43de-4f52-96ba-1496cab02e8d", "row_index": 179, "timestamp": "2018-04-17T19:13:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e38d1421-43de-4f52-96ba-1496cab02e8d", "eventTime": "2018-04-17T19:13:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JqU5rG-YRCoBEKTw5wYXJ1GqLgn204xE-oGS1PsmQZGR2feJx6lL7vrvbNMYf079vpqOD6NCeX526jq3e9-HxeTim9Q38fP0VERR0rTwRoJJaNRJsfaEt9ZsTKFuvip8NxgEpZOj64nmsiEhbiyE9KhjW6uCSzP6hSupq73HR-Pjui1CvdZn33UkcFM9WEgbwLK1eZX5O1lO_OScCwCOyOUbNLe_WGJA2fla7rKoOmK22DnFqeQOkMbk2b3JKsvam2MkRedzqWSW70iFNqYm_HQknoyYtp4B72AiGYfTjD8Jt_Zguz56z4nRus3QBKVVFQiTvUpCwMDq_birYtjAKQaeSeLlSPPaszZSszn1nJq6tSGTq7jVkXwnTp_ieJzYQtek68CYOVSRCttkq6pcdU8MF532mmr_eRvJQX3N7jZsqCHS3iakU4I06ICKrvVK6skgh_BgzsPNkplt4_K14_XKRwcF9WtBrP_eeLBkSiKnTJ79ljd8d8L_Uh-WEJxbDqCRanDDjn9aOanyhOcJ4lPMMHI35fzjU009w14V1M7QAT6MPExu3COJjVgmXvpen-5ehp1SHuSP45nqg1j0o-W5gynV_J8mMRevBkERJ9tjzI1xcogBXUn8G_0LY_Xqrwa0TesQSygW1ptIb8DpUUToLp5AvxMNIg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46156a4-ec7f-49af-a51a-78b2664b02bd", "record_id": "flaws_cloudtrail:0000180:46156a4-ec7f-49af-a51a-78b2664b02bd", "row_index": 180, "timestamp": "2018-04-17T19:13:31Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46156a4-ec7f-49af-a51a-78b2664b02bd", "eventTime": "2018-04-17T19:13:31Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "263e4987-a809-41d1-94ad-7c2db331b14f", "record_id": "flaws_cloudtrail:0000181:263e4987-a809-41d1-94ad-7c2db331b14f", "row_index": 181, "timestamp": "2018-04-17T19:13:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "263e4987-a809-41d1-94ad-7c2db331b14f", "eventTime": "2018-04-17T19:13:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e99777-06f4-4983-86f4-cc0119fe2a30", "record_id": "flaws_cloudtrail:0000182:55e99777-06f4-4983-86f4-cc0119fe2a30", "row_index": 182, "timestamp": "2018-04-17T19:13:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e99777-06f4-4983-86f4-cc0119fe2a30", "eventTime": "2018-04-17T19:13:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082e9a21-a31b-41d6-9c23-497137cbce", "record_id": "flaws_cloudtrail:0000183:082e9a21-a31b-41d6-9c23-497137cbce", "row_index": 183, "timestamp": "2018-04-17T19:13:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082e9a21-a31b-41d6-9c23-497137cbce", "eventTime": "2018-04-17T19:13:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: X-w9GyjWaBLeExYTifG9SA3b8ezG8Mnq3LGSkZFwEHueG5lfg8i9no_sYNl13XPPNttD7f6VmOYbR8UdrNRqDSKcdHhoZi_F5YL3m6jn2J5R0QoeIT1Ag1Xs1jH1Lx7YfVBnodK5kmnZDQ6f0NZ7xFNjAb1TJn7Gro8hPr6uoIL1fBuKwx7OCHJAQxMgj2ntpms-jbavdDv6QEuMx6PnYiJNCjqYsrX8-JU_Was1C71VI5S5AkFP3_osVVjeRiuqQP1li2i3t6lyRQtYq0DQ-izvSWCuZwF1DNY0cacjiblPPvs9H5rlUSUg2U1fFFbY7Tih-6k4H9UQGIEk505oPDNdjZtvgqQDAG5ocd2eLxZo3zSF3cLKYsXigw_kw_MOdV1q42SZx8hPd3G9BDNZoc75SmePoB4J1bAM4WYgs0YMYxiS99Yy0k38kH01-cALTBuE_efCuCSJ5xbJO-_RUqKqGYXsOdFhanlpEO1s0O3egpgYMhXjMIh_095813fCTm5W0HyRPLOywj8SZJcLCcJqqySa8k7830ofEDVHix8l3mAnwrGHVl1Fks1hWuHroa23f2bPGe0pgv694wtCvuy5C0jMO2DcVaGzbvGfri8MliUFd0qvrZxP_CF2g5aHHc8DBRQSuW4Vo-HdAvZUmPhBOkLAE1xVyqQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f98c3e-a535-4dd0-8f6e-6e9891882074", "record_id": "flaws_cloudtrail:0000184:f7f98c3e-a535-4dd0-8f6e-6e9891882074", "row_index": 184, "timestamp": "2018-04-17T19:13:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f98c3e-a535-4dd0-8f6e-6e9891882074", "eventTime": "2018-04-17T19:13:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c164469-8df7-4c16-ae53-61087e171835", "record_id": "flaws_cloudtrail:0000185:21c164469-8df7-4c16-ae53-61087e171835", "row_index": 185, "timestamp": "2018-04-17T19:13:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c164469-8df7-4c16-ae53-61087e171835", "eventTime": "2018-04-17T19:13:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13f2b43f-9e40-43a4-a730-b350737c9", "record_id": "flaws_cloudtrail:0000186:13f2b43f-9e40-43a4-a730-b350737c9", "row_index": 186, "timestamp": "2018-04-17T19:13:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13f2b43f-9e40-43a4-a730-b350737c9", "eventTime": "2018-04-17T19:13:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a72b089-b2b2-4d3f-a1c8-e1ba3a63f8a1", "record_id": "flaws_cloudtrail:0000187:2a72b089-b2b2-4d3f-a1c8-e1ba3a63f8a1", "row_index": 187, "timestamp": "2018-04-17T19:13:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a72b089-b2b2-4d3f-a1c8-e1ba3a63f8a1", "eventTime": "2018-04-17T19:13:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c64c958-4af1-4d60-9133-b3e63b7e2a7a", "record_id": "flaws_cloudtrail:0000188:8c64c958-4af1-4d60-9133-b3e63b7e2a7a", "row_index": 188, "timestamp": "2018-04-17T19:13:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c64c958-4af1-4d60-9133-b3e63b7e2a7a", "eventTime": "2018-04-17T19:13:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Tw_ECT8SoY5gny-3ZehcEXRDEjAQELZJaOCbwdZ_0VT07ObCmzIxiP5v40r2fdlb83sgpvGINcn6_hV4xb3s6iHwkP2XvAqHllxA5bHyAYRGtKiQs0Kv_I7vMWLnOxjb7R6BsMnFr8zr89S_lCuAgk0uVDIawUPb0YvfkkJ_O0p6LL90IlEfAPR5P4y3IkWd1BLloOP4W7p_5nr5kVPwTg1cLV9S_oIJjIWHVXGh-KeICRl9u7QI4-XZTgdxBN0UFHmhGLYwzY4gaxjyXq0PcqcbaO6n2y7EQqq5KSxTiaPo_adYz-5PjeTBlaTTVXlocfhZJY1-aitmAhCg4zGM-cBzSSmROC8BU3bgRdANjr2bjt_xxJ7DXH5WaHRXV-SbxQRYfnJv-iASi3nhk85tihZAgZjuPUHPOhfoQOJzAzUHdeykiNSxAG8CB48fA0jdX4T8kxBvaR3HNUUrI77mxofBCrzsinArATTHlmR6PMhVdYPEQJ_U9cXbsCJfpVvPIQqfc0TYfru-WphN4BMlpNbsHXNJ3w6y4PoCW7yEcqj0KRryIBppdCpW0jVBJa6RfCTds-baVj_hf64zClUhZogCrAVl0Y9dcf6AVXYoTSHD7Ux3dRE3nOb6cs5vZmbRihARbk-hIyqf_2juuqaNuMBXtJapMASoxQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "138088b3-8fbd-49c2-995d-cf0430f9350b", "record_id": "flaws_cloudtrail:0000189:138088b3-8fbd-49c2-995d-cf0430f9350b", "row_index": 189, "timestamp": "2018-04-17T19:13:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "138088b3-8fbd-49c2-995d-cf0430f9350b", "eventTime": "2018-04-17T19:13:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3e8a7bf-cf97-4807-9e8c-0a3a93b5d29f", "record_id": "flaws_cloudtrail:0000190:a3e8a7bf-cf97-4807-9e8c-0a3a93b5d29f", "row_index": 190, "timestamp": "2018-04-17T19:13:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3e8a7bf-cf97-4807-9e8c-0a3a93b5d29f", "eventTime": "2018-04-17T19:13:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba27ee01-b79d-4116-bc6a-55e0d71d5b0f", "record_id": "flaws_cloudtrail:0000191:ba27ee01-b79d-4116-bc6a-55e0d71d5b0f", "row_index": 191, "timestamp": "2018-04-17T19:13:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba27ee01-b79d-4116-bc6a-55e0d71d5b0f", "eventTime": "2018-04-17T19:13:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b05cb7d-96c8-4c2b-806a-714c7cbdbe64", "record_id": "flaws_cloudtrail:0000192:7b05cb7d-96c8-4c2b-806a-714c7cbdbe64", "row_index": 192, "timestamp": "2018-04-17T19:13:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b05cb7d-96c8-4c2b-806a-714c7cbdbe64", "eventTime": "2018-04-17T19:13:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0b08ac-afa8-4d7e-976a-86af4dcf4f46", "record_id": "flaws_cloudtrail:0000193:6d0b08ac-afa8-4d7e-976a-86af4dcf4f46", "row_index": 193, "timestamp": "2018-04-17T19:13:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0b08ac-afa8-4d7e-976a-86af4dcf4f46", "eventTime": "2018-04-17T19:13:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e67eccd4-6246-431d-9004-1740bc51ef65", "record_id": "flaws_cloudtrail:0000194:e67eccd4-6246-431d-9004-1740bc51ef65", "row_index": 194, "timestamp": "2018-04-17T19:13:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e67eccd4-6246-431d-9004-1740bc51ef65", "eventTime": "2018-04-17T19:13:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74f0ac17-9b40-4d8e-b3df-a547d8263989", "record_id": "flaws_cloudtrail:0000195:74f0ac17-9b40-4d8e-b3df-a547d8263989", "row_index": 195, "timestamp": "2018-04-17T19:13:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74f0ac17-9b40-4d8e-b3df-a547d8263989", "eventTime": "2018-04-17T19:13:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8ab1ee8-6e3a-4793-933e-b0cd1e3de4f3", "record_id": "flaws_cloudtrail:0000196:b8ab1ee8-6e3a-4793-933e-b0cd1e3de4f3", "row_index": 196, "timestamp": "2018-04-17T19:13:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8ab1ee8-6e3a-4793-933e-b0cd1e3de4f3", "eventTime": "2018-04-17T19:13:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5f9fe1-b13b-43f7-9091-2aada73faf40", "record_id": "flaws_cloudtrail:0000197:bb5f9fe1-b13b-43f7-9091-2aada73faf40", "row_index": 197, "timestamp": "2018-04-17T19:13:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5f9fe1-b13b-43f7-9091-2aada73faf40", "eventTime": "2018-04-17T19:13:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915d0dfa-bf9e-4613-a0f3-9692b8317e59", "record_id": "flaws_cloudtrail:0000198:915d0dfa-bf9e-4613-a0f3-9692b8317e59", "row_index": 198, "timestamp": "2018-04-17T19:13:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915d0dfa-bf9e-4613-a0f3-9692b8317e59", "eventTime": "2018-04-17T19:13:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f279d613-157e-4227-889e-60150a9cb2db", "record_id": "flaws_cloudtrail:0000199:f279d613-157e-4227-889e-60150a9cb2db", "row_index": 199, "timestamp": "2018-04-17T19:13:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f279d613-157e-4227-889e-60150a9cb2db", "eventTime": "2018-04-17T19:13:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f7377f-d5db-4c19-8579-0a63e36de8f9", "record_id": "flaws_cloudtrail:0000200:f6f7377f-d5db-4c19-8579-0a63e36de8f9", "row_index": 200, "timestamp": "2018-04-17T19:13:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f7377f-d5db-4c19-8579-0a63e36de8f9", "eventTime": "2018-04-17T19:13:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "260c4405-a670-4863-9db2-f7a239d9c367", "record_id": "flaws_cloudtrail:0000201:260c4405-a670-4863-9db2-f7a239d9c367", "row_index": 201, "timestamp": "2018-04-17T19:13:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "260c4405-a670-4863-9db2-f7a239d9c367", "eventTime": "2018-04-17T19:13:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6e59ad-8535-46f0-a008-d3c30352c5e9", "record_id": "flaws_cloudtrail:0000202:5c6e59ad-8535-46f0-a008-d3c30352c5e9", "row_index": 202, "timestamp": "2018-04-17T19:13:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6e59ad-8535-46f0-a008-d3c30352c5e9", "eventTime": "2018-04-17T19:13:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: SLAMoCRk5LzYVDFnnuTZWwazigp1bYjptFcOL7xwaZJID-ENAJrXD_Q5h2wxgu3XfpC7xu9fz2ngKevxHr8hAQkPuwTixHAca2mr0oqQjm05LyJcoKs5pJpuO5jCXrnfmqOYPFINs1wF9VkXWRbCMkl2YbiAhQVgdBaIZXzUXbLs8hTi1YmYOKM5F6gYfc0lUj4ij0UXQC3TEK8WDdjQHDyw5V-U1kh6MULNRa_zCieSm31mDfSZgfI-P44sRJGfUuTGzrX2SMEVG2slHRvXcIHchKXBh4vdoVS_bbsjhLI1yDP2zK3WaBdomEXI8A0wzAgsEmv7ggL7Luv5rmJrC8hh5kt9SLDxQANfq58MX7zPfwiVh-ycrzJTqi8aXiFxccAw8eTu5qEuEVbzE5u5KhaHF404lk2-g3aQGviXuZtPQyYYsJeKdD2EeS094lrF-rk3Cwv6zmp-qxRFCph8iic3YfzHgNDoG_Pvj6IgEA0CFgwJzBs2E_gVX9P9cTAyR8fsH-PW0lyoTebwodb-S68exdVEJGpuOXSvFxqrYJgRHaWoulDTEEFnjEIV3a76rmhnkz7m1205XTP5VJB52lQD5NQI2fA19q9mW2r1zKHkOpCYUd8cRt_VV0VX1pzDUqJnvseD29JESrKHwQyOJiG3kZz6DAhUtD5KeQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b7151e1-d8d5-4c89-b14e-815f544365a2", "record_id": "flaws_cloudtrail:0000203:1b7151e1-d8d5-4c89-b14e-815f544365a2", "row_index": 203, "timestamp": "2018-04-17T19:13:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b7151e1-d8d5-4c89-b14e-815f544365a2", "eventTime": "2018-04-17T19:13:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d93a6f5-dd71-4d7d-bc56-a7e3f909150d6", "record_id": "flaws_cloudtrail:0000204:2d93a6f5-dd71-4d7d-bc56-a7e3f909150d6", "row_index": 204, "timestamp": "2018-04-17T19:13:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d93a6f5-dd71-4d7d-bc56-a7e3f909150d6", "eventTime": "2018-04-17T19:13:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f81292c-75e1-4ac1-97b9-c9d55686dc49", "record_id": "flaws_cloudtrail:0000205:2f81292c-75e1-4ac1-97b9-c9d55686dc49", "row_index": 205, "timestamp": "2018-04-17T19:13:43Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f81292c-75e1-4ac1-97b9-c9d55686dc49", "eventTime": "2018-04-17T19:13:43Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a35dad5-5c0d-4e9f-b7d3-9a42b15ff8c6", "record_id": "flaws_cloudtrail:0000206:8a35dad5-5c0d-4e9f-b7d3-9a42b15ff8c6", "row_index": 206, "timestamp": "2018-04-17T19:13:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a35dad5-5c0d-4e9f-b7d3-9a42b15ff8c6", "eventTime": "2018-04-17T19:13:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23d4da9f-ecfc-4bb6-b378-1be3a59a269a", "record_id": "flaws_cloudtrail:0000207:23d4da9f-ecfc-4bb6-b378-1be3a59a269a", "row_index": 207, "timestamp": "2018-04-17T19:13:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23d4da9f-ecfc-4bb6-b378-1be3a59a269a", "eventTime": "2018-04-17T19:13:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b28b283-16aa-434d-b843-9bd4d583fe13", "record_id": "flaws_cloudtrail:0000208:0b28b283-16aa-434d-b843-9bd4d583fe13", "row_index": 208, "timestamp": "2018-04-17T19:13:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b28b283-16aa-434d-b843-9bd4d583fe13", "eventTime": "2018-04-17T19:13:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AfZ1HhIO-LkKjuTLfYrGSo8HPqVZZblDY7Wmjt_HQfWjM7XfGGiwtQhevN8a7e76Le0Vm_03EuPGvaS8L3ApwPGuYUnZkZpIqvfcQ16ujetEf3HRPESR4lEUuzs74OQ9X8MeA-RMlwwt8dnprmm5uN5XbxzT6TbxA4w3IPCBg1O4Jtnc0I1ULI_R4aGgnZBNMApj7oBXsMMRRZhVFUjbKl5hlJoeeZcLSuF7IQAQzNUQXZMTlrZLjeAstX4kaGa2sObLpyImTxsJSImzVaWW3ffqJIwQ5x0VT-B_wiY97Y5aVu46Q4pHNPXeh615QzdIr17WKG5hpCB2j_OhwWtrFOPmaUeAEoB58BQuT0aOZCwHiXslrcJ-xLZ-73v-HRn5Bvoya08YtN8cxXQfYoWnqArjdwIyKfLt5mcvjqyykDh57kcP8wYvhcZwVTXCu8bUH6wmdjqrdKoLltBlog2t-OPip0EZlQxigtb9O1W7nJJmGVp2GcfH13SXyHKYMWI0TNzUlBGg9GWQRaRmGMBMOYlB8rO2yxpMVLdyrHclJv7m4yHNzxZjWHeFe8KxO45qozXChXaM94-Y6d3PFLV0NB3LoJDVWUo1_dso3zQU8bkITR78dQ9X1ejpAyS1ITJSGy4Uzi15-cTXxhqd2azY5p1IDhqHr56FGAr5zt0", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99c0181-4db8-4465-a45b-9534039dd390", "record_id": "flaws_cloudtrail:0000209:f99c0181-4db8-4465-a45b-9534039dd390", "row_index": 209, "timestamp": "2018-04-17T19:13:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99c0181-4db8-4465-a45b-9534039dd390", "eventTime": "2018-04-17T19:13:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb9bc6c-41cc-4646-93e5-ca543f2cd80e", "record_id": "flaws_cloudtrail:0000210:8cb9bc6c-41cc-4646-93e5-ca543f2cd80e", "row_index": 210, "timestamp": "2018-04-17T19:13:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb9bc6c-41cc-4646-93e5-ca543f2cd80e", "eventTime": "2018-04-17T19:13:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ff479553-711e-452b-9994-7acb12366d", "record_id": "flaws_cloudtrail:0000211:6ff479553-711e-452b-9994-7acb12366d", "row_index": 211, "timestamp": "2018-04-17T19:13:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ff479553-711e-452b-9994-7acb12366d", "eventTime": "2018-04-17T19:13:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48ff59d8-ff00-4cfb-b0e2-a135b09649e", "record_id": "flaws_cloudtrail:0000212:48ff59d8-ff00-4cfb-b0e2-a135b09649e", "row_index": 212, "timestamp": "2018-04-17T19:13:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48ff59d8-ff00-4cfb-b0e2-a135b09649e", "eventTime": "2018-04-17T19:13:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3RCi2T0_uToSShSZLz5iKg7EhuNrTwX25c5yGdhLJbPoblerIRyX2MT6sJxtyxwqc8lLLydI1zKvBJreNfJtvGE85kc_YZzL0c2DYhWYxv0kQloSSqdqrK6VntrmSr_cUM1y7hKVl4i3XBtJc7Et_xSl4lEiGhCzVdmuZ67cooy6Pzm44VwS4nfY7VPlD8TYdwZ3y28mR0SGHlSC7TnWIG7QN77FHrps3t1lHEywD6ing61rKJWZMbD71t1dxcaAIelcu6RZENCEY6fMCy_pF1aFwa11mFwNQigPz31bbOttvm9hUPYWhgMYOIbA2Rc66Ppi1EmP6B1-AZe7T58lDAoTej-ft3eaAFU4IGdsfFwzzVQOy6bjtnWql8W2T3qfTdR9pTMgXyGLXKPxVQqtpafZeLmx65Cqo6Swx5agKbR3Cvn4sVeqbSriF11tXOZ8upeGHZB7URONaR7Cwqmki2UPcrQwjk-OqpRPCHRfmGIc-rBIKEmtuwgq6PbgDJp8Re7Xt4pLVmZJ1XHphfDp3E6S1AoAwWOmFvjBL-vlW3hgEom3N140xlXOmgz8Hc4bZy8ZAR9dvToWIt2IgYLnlPxsm_k-QZxiO_iwCdDc3ZxBpzK2jHpI2I36z8UAsRg3IuuHPTAF4Fb2Ny4HcKmF7PPgYOooD42lZw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8919a9a-e3e5-4e9b-b103-f2e59a0444a2", "record_id": "flaws_cloudtrail:0000213:f8919a9a-e3e5-4e9b-b103-f2e59a0444a2", "row_index": 213, "timestamp": "2018-04-17T19:13:47Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8919a9a-e3e5-4e9b-b103-f2e59a0444a2", "eventTime": "2018-04-17T19:13:47Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150dfa8d-38e4-46aa-8dc0-91591bf58398", "record_id": "flaws_cloudtrail:0000214:150dfa8d-38e4-46aa-8dc0-91591bf58398", "row_index": 214, "timestamp": "2018-04-17T19:13:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150dfa8d-38e4-46aa-8dc0-91591bf58398", "eventTime": "2018-04-17T19:13:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b4bb5d4-969d-46e7-977b-7d8328bf343c", "record_id": "flaws_cloudtrail:0000215:0b4bb5d4-969d-46e7-977b-7d8328bf343c", "row_index": 215, "timestamp": "2018-04-17T19:13:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b4bb5d4-969d-46e7-977b-7d8328bf343c", "eventTime": "2018-04-17T19:13:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11ff8a85-f4fb-4472-86d5-4effa074f4b1", "record_id": "flaws_cloudtrail:0000216:11ff8a85-f4fb-4472-86d5-4effa074f4b1", "row_index": 216, "timestamp": "2018-04-17T19:13:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11ff8a85-f4fb-4472-86d5-4effa074f4b1", "eventTime": "2018-04-17T19:13:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aae3160-9500-473e-8181-13bf8ba14126", "record_id": "flaws_cloudtrail:0000217:5aae3160-9500-473e-8181-13bf8ba14126", "row_index": 217, "timestamp": "2018-04-17T19:13:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aae3160-9500-473e-8181-13bf8ba14126", "eventTime": "2018-04-17T19:13:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29e043362-b8e0-41f3-8b4c-2e347828a2ee", "record_id": "flaws_cloudtrail:0000218:29e043362-b8e0-41f3-8b4c-2e347828a2ee", "row_index": 218, "timestamp": "2018-04-17T19:13:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29e043362-b8e0-41f3-8b4c-2e347828a2ee", "eventTime": "2018-04-17T19:13:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88f7fa4e-7181-4148-8d44-54b9db776154", "record_id": "flaws_cloudtrail:0000219:88f7fa4e-7181-4148-8d44-54b9db776154", "row_index": 219, "timestamp": "2018-04-17T19:13:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88f7fa4e-7181-4148-8d44-54b9db776154", "eventTime": "2018-04-17T19:13:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f63a32d-ac8f-47a3-ac76-025a0cb6db1c", "record_id": "flaws_cloudtrail:0000220:8f63a32d-ac8f-47a3-ac76-025a0cb6db1c", "row_index": 220, "timestamp": "2018-04-17T19:13:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f63a32d-ac8f-47a3-ac76-025a0cb6db1c", "eventTime": "2018-04-17T19:13:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ffeb912-1a04-4bf6-a49e-95e00811a329", "record_id": "flaws_cloudtrail:0000221:5ffeb912-1a04-4bf6-a49e-95e00811a329", "row_index": 221, "timestamp": "2018-04-17T19:13:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ffeb912-1a04-4bf6-a49e-95e00811a329", "eventTime": "2018-04-17T19:13:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eb9a8a4-7f71-4984-a7f8-7ea6c677d827", "record_id": "flaws_cloudtrail:0000222:2eb9a8a4-7f71-4984-a7f8-7ea6c677d827", "row_index": 222, "timestamp": "2018-04-17T19:13:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eb9a8a4-7f71-4984-a7f8-7ea6c677d827", "eventTime": "2018-04-17T19:13:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be13349-2ee1-4c1b-ad7e-72c609d522eb", "record_id": "flaws_cloudtrail:0000223:be13349-2ee1-4c1b-ad7e-72c609d522eb", "row_index": 223, "timestamp": "2018-04-17T19:13:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be13349-2ee1-4c1b-ad7e-72c609d522eb", "eventTime": "2018-04-17T19:13:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "517719b8e-a047-44b8-b304-ee61216f", "record_id": "flaws_cloudtrail:0000224:517719b8e-a047-44b8-b304-ee61216f", "row_index": 224, "timestamp": "2018-04-17T19:13:53Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "517719b8e-a047-44b8-b304-ee61216f", "eventTime": "2018-04-17T19:13:53Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af5c228a-62a2-469b-ac3d-c0d4212b33a5", "record_id": "flaws_cloudtrail:0000225:af5c228a-62a2-469b-ac3d-c0d4212b33a5", "row_index": 225, "timestamp": "2018-04-17T19:13:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af5c228a-62a2-469b-ac3d-c0d4212b33a5", "eventTime": "2018-04-17T19:13:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: t5bk-mpoYNFowzKfJdyr7q9B71Zqh2O2EYEQpx1_n089F9wJkPDPzGjqu1g4LLOWdvOSYxiWscqW_tk40qBVG-kiHB3IS_SLQzLRBFynuJVOUhUe9Shdlso2azPsVVcCVp2AJ_uhzCPDJ97VITK3HXgYVOAAZLtMy2xTHZ6D_3_p3GBhd2BsZSBDjteJ1Nn8PxLPoouaGYA_2yPaGMgvlfIDOwgpxONBprHCk7wVOxC8UjmnxcYU8jpeIcWgECvVfjOqLY8hjBomZKZ07kvkwtHCa2fDjjiZoA2joNKM2S-gjIgsBDKZo5jXc9UCLY92YO36xQHXVZ5jHGW6nO32PlgcPILone7mjFyF0_pM0e6Y1Q5qcOpbtAuyBswhZyKkGEWRgQzIOhulBZPOfx7HQRUrVrXnA51bitNqhZJDpFaR83Risvu3WSOyaf04Bwxv1-SlNtN9zj_AM5He9jh9y738z8cykO0yEpcf4NjyzdOpmzHxGrEC0g10RUJSb27mk8OO2VIJm6zJkz5AB5ggLTeKfmuJGCJLkwHGgRzgP3utqtV_fM46wIJhDbrWvB_C6QYg9gZ1mre29iT93_uth8ilUBgaWHucRXosNbEY3ra-nnfDfafD4ZZsQARACOS7wJbuqFDN7ep9qtIWlVfZl7hB0F4A8FTVAA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a6e99d-ca27-4ddf-8f2a-883acb8388e1", "record_id": "flaws_cloudtrail:0000226:e5a6e99d-ca27-4ddf-8f2a-883acb8388e1", "row_index": 226, "timestamp": "2018-04-17T19:13:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a6e99d-ca27-4ddf-8f2a-883acb8388e1", "eventTime": "2018-04-17T19:13:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0da0a1c1-4f1c-4a97-8d97-03ca7b9c5ea4", "record_id": "flaws_cloudtrail:0000227:0da0a1c1-4f1c-4a97-8d97-03ca7b9c5ea4", "row_index": 227, "timestamp": "2018-04-17T19:13:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0da0a1c1-4f1c-4a97-8d97-03ca7b9c5ea4", "eventTime": "2018-04-17T19:13:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e141fee8-1e44-49b3-b70d-aba827caddf7", "record_id": "flaws_cloudtrail:0000228:e141fee8-1e44-49b3-b70d-aba827caddf7", "row_index": 228, "timestamp": "2018-04-17T19:13:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e141fee8-1e44-49b3-b70d-aba827caddf7", "eventTime": "2018-04-17T19:13:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "302815ea3-af61-4263-8d57-66dca030fa07", "record_id": "flaws_cloudtrail:0000229:302815ea3-af61-4263-8d57-66dca030fa07", "row_index": 229, "timestamp": "2018-04-17T19:13:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "302815ea3-af61-4263-8d57-66dca030fa07", "eventTime": "2018-04-17T19:13:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d787776-4644-4434-a62f-6c711a08e91a", "record_id": "flaws_cloudtrail:0000230:d787776-4644-4434-a62f-6c711a08e91a", "row_index": 230, "timestamp": "2018-04-17T19:13:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d787776-4644-4434-a62f-6c711a08e91a", "eventTime": "2018-04-17T19:13:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a0a5681-8040-4639-8ba7-884a0f863cd6", "record_id": "flaws_cloudtrail:0000231:0a0a5681-8040-4639-8ba7-884a0f863cd6", "row_index": 231, "timestamp": "2018-04-17T19:13:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a0a5681-8040-4639-8ba7-884a0f863cd6", "eventTime": "2018-04-17T19:13:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c9e724-0c5b-4188-b085-1506e298b41b", "record_id": "flaws_cloudtrail:0000232:31c9e724-0c5b-4188-b085-1506e298b41b", "row_index": 232, "timestamp": "2018-04-17T19:13:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c9e724-0c5b-4188-b085-1506e298b41b", "eventTime": "2018-04-17T19:13:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6292baa2-9219-452d-aae8-8a473ef044e3", "record_id": "flaws_cloudtrail:0000233:6292baa2-9219-452d-aae8-8a473ef044e3", "row_index": 233, "timestamp": "2018-04-17T19:13:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6292baa2-9219-452d-aae8-8a473ef044e3", "eventTime": "2018-04-17T19:13:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "275739aa5-7ed8-49e9-8f2d-2d8e9aca7454", "record_id": "flaws_cloudtrail:0000234:275739aa5-7ed8-49e9-8f2d-2d8e9aca7454", "row_index": 234, "timestamp": "2018-04-17T19:13:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "275739aa5-7ed8-49e9-8f2d-2d8e9aca7454", "eventTime": "2018-04-17T19:13:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324fffc9-4fd5-4944-a341-7b6a38f1657e", "record_id": "flaws_cloudtrail:0000235:324fffc9-4fd5-4944-a341-7b6a38f1657e", "row_index": 235, "timestamp": "2018-04-17T19:13:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1830, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324fffc9-4fd5-4944-a341-7b6a38f1657e", "eventTime": "2018-04-17T19:13:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: d1I-15UDUHzs5b7kj9zrTWD9Pz9wBrars46Rk2SnJOh4B2WYnkm1z-4POrQwFHH0eFmhjwSUvv4vWv5dCPftq1DXO2g23GLx91YSFK7CX27hajVWtUkLsleScrqzzyVtqgr4ocpDX4hLIKpsx_fqd-WER22HfgeiSKlcTVDBrAiUb13qNjIAs1XZypP9X7ax2gfksW3I4nxPNzI1uL1lRoLFftICBHpipjFkcKgUcSofN3d8aG-tbGV2uzuDUfRDmGGfrnZ7Wi4QWEYpkkeLqbZsXmmR7B1ETeaeuAO7mka614yfnB4U4Mi195GEVEaWd0VB1XBu59V_ay-baC3nvqg57_8hytV-V5vqmGYm-SoGK3m1RYL9PDywJdhnnLszHazP_Mr2la7MBRR-RIXR5czHno9zE4bvZZBFCD9GafZzyvleRWZiQpyhaYACnyJvZlP3cowvrJ4-1ik52Ruhf0ym_iWaC60vh1xC9S6hrr_d8rnYcFDDaTNeckaMAqTO5MPxM6rcYWmX_xafmpGZPlnMpZX5K-GUKFQgU5JyXYUtK3qBpqaDylifCKTttEhzPyYuT5vAtQEaK9qqYtYn40BN8lSeAbrv5b-cZsZzEURTSw-2LTsgmGcnjifPF00iXArlGVR48fSARvkPTN-L7zfbjP9FJzH9jjJN", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e43903f1-da97-4ceb-9381-27b0d3e4bb82", "record_id": "flaws_cloudtrail:0000236:e43903f1-da97-4ceb-9381-27b0d3e4bb82", "row_index": 236, "timestamp": "2018-04-17T19:13:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e43903f1-da97-4ceb-9381-27b0d3e4bb82", "eventTime": "2018-04-17T19:13:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cK4XdE4ogbD1cFG-v4Vu_cbqFAQv4HmOJx4Cxg48rSBc2wo1AJN22RaweQZA0nYi3rZebdbPhFUz2DGoj_cTCdnO8vmdGIN5yXVMI9CGkl93wVRAFYhZoDa8yrJIM2QbJnKHYdBQ9eOxCweh3ZKC3R_b0ogZe04X2mSWfArFEh-t2I0spiJ0pB-8jvOTUCOrVfg6uhgX83xsV1At7gn-N-PHvI45BJxuTH5ZLl5iBYHvFbCZOgx-ZPaZ0M89aYWEf6n9E5CzeBXqFUZfWWDb1Zcwjk4VVhdVtKXnXxjz_9wFrZyGFKsULt5lqWXSa4ewq0M29c9oGNVaIQkeCAKfty2NNxZXiDKul396wc4-sXxIe83O1lURZAzss2H5FVQ7enDAKUKqcrE_CJWQ4oHydRtCaWl1SCdnbRDPxdEWcndsv8bbRGkjoVjg3vZZbMNensDPF3rwqtcmB-pzJG6FOzxqYhQ_6EUgfho7TTuJ2XeltcM6kp-d-f4JcxkNgXuKD6R7B4PTDwDDlJPUsnXKEpniYX7SLGXLl_AHbv9So-_JOhlkJKUWDINVmy9Yojp9uTV-7neLJ3puxYnNgZY8gUKr9PISG7aA8SLkc1V0iHIl2M-Y8qVoTrD13X_uVQnd067BNZx-kNUo5Or-es4uXoTlb3sidUtmvR2L", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db50016-7af7-462a-a1db-15c5a6b38b7f", "record_id": "flaws_cloudtrail:0000237:5db50016-7af7-462a-a1db-15c5a6b38b7f", "row_index": 237, "timestamp": "2018-04-17T19:13:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db50016-7af7-462a-a1db-15c5a6b38b7f", "eventTime": "2018-04-17T19:13:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1838db5-a669-4587-92e3-84e91ffd8a3d", "record_id": "flaws_cloudtrail:0000238:d1838db5-a669-4587-92e3-84e91ffd8a3d", "row_index": 238, "timestamp": "2018-04-17T19:14:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1838db5-a669-4587-92e3-84e91ffd8a3d", "eventTime": "2018-04-17T19:14:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6498e46e-de58-4da4-a9c4-d651d5e4b7bd", "record_id": "flaws_cloudtrail:0000239:6498e46e-de58-4da4-a9c4-d651d5e4b7bd", "row_index": 239, "timestamp": "2018-04-17T19:14:00Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6498e46e-de58-4da4-a9c4-d651d5e4b7bd", "eventTime": "2018-04-17T19:14:00Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "175451cc-406c-4831-9932-b287e18e552e", "record_id": "flaws_cloudtrail:0000240:175451cc-406c-4831-9932-b287e18e552e", "row_index": 240, "timestamp": "2018-04-17T19:14:00Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "175451cc-406c-4831-9932-b287e18e552e", "eventTime": "2018-04-17T19:14:00Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd0ebe6a-d425-405a-9724-3c728f56696b", "record_id": "flaws_cloudtrail:0000241:cd0ebe6a-d425-405a-9724-3c728f56696b", "row_index": 241, "timestamp": "2018-04-17T19:14:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd0ebe6a-d425-405a-9724-3c728f56696b", "eventTime": "2018-04-17T19:14:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c506ced-1bd8-400d-9bb2-d7bae4f23c8b", "record_id": "flaws_cloudtrail:0000242:4c506ced-1bd8-400d-9bb2-d7bae4f23c8b", "row_index": 242, "timestamp": "2018-04-17T19:14:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c506ced-1bd8-400d-9bb2-d7bae4f23c8b", "eventTime": "2018-04-17T19:14:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9555b411-6803-4455-b433-d5dce06bf0a4", "record_id": "flaws_cloudtrail:0000243:9555b411-6803-4455-b433-d5dce06bf0a4", "row_index": 243, "timestamp": "2018-04-17T19:14:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9555b411-6803-4455-b433-d5dce06bf0a4", "eventTime": "2018-04-17T19:14:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: P4o1_izMCs-IzC8qvyzJ7A9-KVfF10Zy1LT231-1jhY571mkQKwK2jSY65pEpVk-DEcF1Y_pOL83iuocOSRPo_Hk0cAxH5cK3KujHPNX-znKwzZDt3g6FXkRwxG246j1oSrmsj0sKlCui2vSkjujuxry1fiyyKz0dkrF99OseR3_oNqcwn4XdJg3UP6tZchIcPm4tw8LfHSjuDXyyJoFkDLsFb6ztvc_ZsGVjgPlsA-BU0W-jNtox8N0Y2bsv03iYynJkM3veCgJcTcIRHMsnO_kwXhQKhhO1EZ0yWfMLehuVFLjwDpbxHkC357KmHKaInv6qe6O3u-SVtQ7V9HQdt5UnA8stpy1QriqeKcKrhI1YhhXCi0ruw7cebKY1XzYECHw54SI6kmwuR-QCurzVffz6CCXFohbOxmvzVK-B3b23gxRfgLI5MKNSmYxHrSKzre_vR1n8fIRycYqUEpOhcrHdo0fZ6F8Js4jizpIGOJBR1t09nS6TQKnMtKS-ndscF1PI8Cz295qzCj2X7FvXxwLJSLFoDZaUj90l8g1MjzLw1Itx8L5D1AcASo6SqHJ_iZE0P9YzkTCwdaoWJJnILSVqePBBm6auowLgHjCfxSJ74nIq6TL45gXV1PkPovEU1_wBefhjZlcrKqYiAyK4Qv81_qYbO98bw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b71b729-7196-475f-8921-bcad651f86a5", "record_id": "flaws_cloudtrail:0000244:1b71b729-7196-475f-8921-bcad651f86a5", "row_index": 244, "timestamp": "2018-04-17T19:14:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b71b729-7196-475f-8921-bcad651f86a5", "eventTime": "2018-04-17T19:14:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61262f-21cb-4684-8c3e-7254e99e2aea", "record_id": "flaws_cloudtrail:0000245:61262f-21cb-4684-8c3e-7254e99e2aea", "row_index": 245, "timestamp": "2018-04-17T19:14:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61262f-21cb-4684-8c3e-7254e99e2aea", "eventTime": "2018-04-17T19:14:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87da7c66-c36d-4f37-9b46-2f29db66c825", "record_id": "flaws_cloudtrail:0000246:87da7c66-c36d-4f37-9b46-2f29db66c825", "row_index": 246, "timestamp": "2018-04-17T19:14:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87da7c66-c36d-4f37-9b46-2f29db66c825", "eventTime": "2018-04-17T19:14:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065e9704-61d3-4ca4-86d6-665010bc4bb0", "record_id": "flaws_cloudtrail:0000247:065e9704-61d3-4ca4-86d6-665010bc4bb0", "row_index": 247, "timestamp": "2018-04-17T19:14:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065e9704-61d3-4ca4-86d6-665010bc4bb0", "eventTime": "2018-04-17T19:14:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8bc591-7c3f-46e9-84cc-27abaf7ffb67", "record_id": "flaws_cloudtrail:0000248:ee8bc591-7c3f-46e9-84cc-27abaf7ffb67", "row_index": 248, "timestamp": "2018-04-17T19:14:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8bc591-7c3f-46e9-84cc-27abaf7ffb67", "eventTime": "2018-04-17T19:14:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe61e0b5-751b-40eb-aa10-cebed7ad2314", "record_id": "flaws_cloudtrail:0000249:fe61e0b5-751b-40eb-aa10-cebed7ad2314", "row_index": 249, "timestamp": "2018-04-17T19:14:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe61e0b5-751b-40eb-aa10-cebed7ad2314", "eventTime": "2018-04-17T19:14:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66846de2-7ef4-4aee-aefb-6b32b0e9fa22", "record_id": "flaws_cloudtrail:0000250:66846de2-7ef4-4aee-aefb-6b32b0e9fa22", "row_index": 250, "timestamp": "2018-04-17T19:14:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66846de2-7ef4-4aee-aefb-6b32b0e9fa22", "eventTime": "2018-04-17T19:14:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc22b7b5-9e7b-429c-829c-2b45560cabec", "record_id": "flaws_cloudtrail:0000251:cc22b7b5-9e7b-429c-829c-2b45560cabec", "row_index": 251, "timestamp": "2018-04-17T19:14:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc22b7b5-9e7b-429c-829c-2b45560cabec", "eventTime": "2018-04-17T19:14:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ba300f8-c8ee-4c36-8301-93327db12", "record_id": "flaws_cloudtrail:0000252:4ba300f8-c8ee-4c36-8301-93327db12", "row_index": 252, "timestamp": "2018-04-17T19:14:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1271, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ba300f8-c8ee-4c36-8301-93327db12", "eventTime": "2018-04-17T19:14:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec558a36-4aba-4f06-bc14-1e934070d038", "record_id": "flaws_cloudtrail:0000253:ec558a36-4aba-4f06-bc14-1e934070d038", "row_index": 253, "timestamp": "2018-04-17T19:14:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec558a36-4aba-4f06-bc14-1e934070d038", "eventTime": "2018-04-17T19:14:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f156baf-d7b4-4dd5-bf24-897891889499", "record_id": "flaws_cloudtrail:0000254:7f156baf-d7b4-4dd5-bf24-897891889499", "row_index": 254, "timestamp": "2018-04-17T19:14:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f156baf-d7b4-4dd5-bf24-897891889499", "eventTime": "2018-04-17T19:14:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3r8C0Di0NA-_4-ItKroonA6iwLfUjtvE2eL7AgnWW1s5g_CCHlT13mjOGdFThRgcLzR6ZLJoEt53KjLwT0hikDyQCxSNYhnzvYnq4ml7E69_vgekKnm_th15mn_SjQXS8Rjx15CSSPEiNTcO2ilSLphzNGPBbEmBF3iUWYc9IppE9cU1F199JnbDH_TKGZQRb45AmkeP60j5LBtHFNkBE0blBjMfwSunDFOZi6RM-Uc6PfQYRYC4wgWen3yMD793Iw3KI6hXkTvJojRlxclf42adTNWY2bAiB7WmyncmbP1R9GdftXRHBMZAnXIBk1qkVX_IaXi787H1GHNuSBvsHSkUPYQY1YL4WGTlPRlobQE1-SJcTHXJocwg3AXcEmrWy3pv1F6DwVpQPRJRaYixU4rFtHBNpyIDnBXWU0pU2zd6lcfkGrzxZJXWtr15JxRlQbPHFS0WWj6KaeXaJXsM0_pVw0wVKTb0D_77VRl3S2pdalmjYP-P5XV7wBGAdLb7dPKvAXC3vOHdks848eJkqOZoCroyfpuNX2ejMZIzYEA79crVjE1o6mXi_2uYmilDD2cAyeLvV87ekLVYPHUIhwCqJlf7tcirNcMRZD7oQQHre3eoWaeGiUP37skThe96eXp9Nkj3ODAVv2eWv09tamsY0GSW2vscoV4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3752b704-bc4c-43a8-bd78-6d9ebfe162c6", "record_id": "flaws_cloudtrail:0000255:3752b704-bc4c-43a8-bd78-6d9ebfe162c6", "row_index": 255, "timestamp": "2018-04-17T19:14:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3752b704-bc4c-43a8-bd78-6d9ebfe162c6", "eventTime": "2018-04-17T19:14:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b514bb2-018a-4805-bcd2-882b44dda3ab", "record_id": "flaws_cloudtrail:0000256:3b514bb2-018a-4805-bcd2-882b44dda3ab", "row_index": 256, "timestamp": "2018-04-17T19:14:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b514bb2-018a-4805-bcd2-882b44dda3ab", "eventTime": "2018-04-17T19:14:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369dc6a1-1c18-4391-ab4a-74caca1f875b", "record_id": "flaws_cloudtrail:0000257:369dc6a1-1c18-4391-ab4a-74caca1f875b", "row_index": 257, "timestamp": "2018-04-17T19:14:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369dc6a1-1c18-4391-ab4a-74caca1f875b", "eventTime": "2018-04-17T19:14:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6JIqQH-4KY4w1focCviHp0hLFQpN4TVd-kYkcmYBKAnomNyw5XgPiYZwmlpmTZM9ji7RC5wKK_DjmQfBgyZRhGmXdr2LLE6nGP73lxm-8bilZWtENnPtf-9S_y8yLxfpX761hDHGl9BkvEkH3FZlFB29-_OPvNWcmePYIe8jZOYOTqwby1HT_GN2eq3vNW7gYKw9vJ8dK-eoaLGZ1y8PNtePLeHGGvthEh-K-23fbWEuhLNs-nsyedz_5NQbiJt_a6Hoqzm32DydB1_yyTea8xUzoMhdMXjnKtn1KVZvPA3ZEGQW6gTrjhxnOtABKmB2nPC_KEmgaTUYqOs6n1Jlua2jOib6WsdyZmgort7OAz9NeZ3AE3YlLK440UtvEhfZYwe8NMI94mNmpAxpsdi023dtJlcSfRttqCuLadwpwf3WkaobLttvRSjDXYmBdmfj6soxlNdy5Qo0nldAHZkyFZX_YgQPVObvCq9GFlTkureowau3q9wMHVsxoM9XYj_lxZyp9UIHh5-SuPqFNwGorluQkVpeqSUKLLbZu7UPdLtvobIvndjjdTOP8h_IoTtWC2Phx7e2rlDGQ61AidazaRiU202Mn8523VXiazP9Be-IH-JtvC07NUyNuW1bno2ZxmokkUcTIsuRQiwNdLgKBYAzdauKQxpNow", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e48f70ec-78df-40f4-8b24-e1c2921e41a3", "record_id": "flaws_cloudtrail:0000258:e48f70ec-78df-40f4-8b24-e1c2921e41a3", "row_index": 258, "timestamp": "2018-04-17T19:14:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e48f70ec-78df-40f4-8b24-e1c2921e41a3", "eventTime": "2018-04-17T19:14:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4bbd193-263a-4c05-a4c3-9eba2cf702971", "record_id": "flaws_cloudtrail:0000259:e4bbd193-263a-4c05-a4c3-9eba2cf702971", "row_index": 259, "timestamp": "2018-04-17T19:14:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4bbd193-263a-4c05-a4c3-9eba2cf702971", "eventTime": "2018-04-17T19:14:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f291bf9-855a-4a1a-a9f2-7c8fd6f82f63", "record_id": "flaws_cloudtrail:0000260:6f291bf9-855a-4a1a-a9f2-7c8fd6f82f63", "row_index": 260, "timestamp": "2018-04-17T19:14:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f291bf9-855a-4a1a-a9f2-7c8fd6f82f63", "eventTime": "2018-04-17T19:14:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: L4SftJFaz8LRkoAjjGWr94GimFXo7Dh061MoqRql-4W6psMNzlHQetKNwqnlS2rqiKf_EqCLaRiIdEtaFbE2AM-NHg1SUtZvj4YFTbrdK_AZsM8bVd1NG4Xxp_tmyEpXPwnd5o_fDEj9WaouOlJc4KtPsOjLCzY7LargUdP3ugF22O0IhQ7hIW531AcjDtGB80vxwLoayVlPDTgDvPM--EFQt98eMuBen0AnRvk6fsbrzA1Vbc1K8JMkBX8hi8oZaoYRUOYSpza7IxJjsssMwafCnJ5DlCyZBN3VvjG00Ql573ncXyF5I1Xi98DN2lzGN8nwFFdaiiPbig9XvKjKrN26HBVv_fRY5JQSJuzHz8Z2H4QjfCJiScao9Ruo0vnT9B9RooythztX4r5mIfqY1S3k7tsUdtJ3u6KRKVW8o1MpJmKb6MBfHnE085h_ZxJR9mrURQlbeump74ndosH5JA763TVQYhywGKUP0WH96TdTX4RsxHHGnxBBKa2Efcnuf-7lEh4-t6Y96UQJ2aEKJfIwQprDhWMU0L5Dw_NK1sg2PR47HnmGAJU_2PCtgcEKMGhvxdR3xkXQz6UVTzJ7dmrp8xvpUFt1XRTWispBFqn3u8NLl6m51n8DcjwS9YAvBQLhbud79J6qUvxUvVkCqVO6M8Eewt2Hct0AYCst", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "434c0cbb-e113-455b-bac9-5180b4fff8c6", "record_id": "flaws_cloudtrail:0000261:434c0cbb-e113-455b-bac9-5180b4fff8c6", "row_index": 261, "timestamp": "2018-04-17T19:14:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "434c0cbb-e113-455b-bac9-5180b4fff8c6", "eventTime": "2018-04-17T19:14:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fe94357-0ab7-4c05-98a7-06b502f725824", "record_id": "flaws_cloudtrail:0000262:5fe94357-0ab7-4c05-98a7-06b502f725824", "row_index": 262, "timestamp": "2018-04-17T19:14:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fe94357-0ab7-4c05-98a7-06b502f725824", "eventTime": "2018-04-17T19:14:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c100031a-7a70-4b46-ac17-b633e9a55b4b", "record_id": "flaws_cloudtrail:0000263:c100031a-7a70-4b46-ac17-b633e9a55b4b", "row_index": 263, "timestamp": "2018-04-17T19:15:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c100031a-7a70-4b46-ac17-b633e9a55b4b", "eventTime": "2018-04-17T19:15:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42523-956f-4deb-8b16-2d9f3ce6c44b", "record_id": "flaws_cloudtrail:0000264:42523-956f-4deb-8b16-2d9f3ce6c44b", "row_index": 264, "timestamp": "2018-04-17T19:15:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42523-956f-4deb-8b16-2d9f3ce6c44b", "eventTime": "2018-04-17T19:15:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd69298d-6226-432e-a30b-be2a0c5e951b", "record_id": "flaws_cloudtrail:0000265:cd69298d-6226-432e-a30b-be2a0c5e951b", "row_index": 265, "timestamp": "2018-04-17T19:15:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd69298d-6226-432e-a30b-be2a0c5e951b", "eventTime": "2018-04-17T19:15:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56175b-7393-4575-b1c3-bfaa2ebd5fc8", "record_id": "flaws_cloudtrail:0000266:56175b-7393-4575-b1c3-bfaa2ebd5fc8", "row_index": 266, "timestamp": "2018-04-17T19:15:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56175b-7393-4575-b1c3-bfaa2ebd5fc8", "eventTime": "2018-04-17T19:15:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e2bac6-f77b-409c-a7fd-9b66513cc517", "record_id": "flaws_cloudtrail:0000267:b0e2bac6-f77b-409c-a7fd-9b66513cc517", "row_index": 267, "timestamp": "2018-04-17T19:15:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e2bac6-f77b-409c-a7fd-9b66513cc517", "eventTime": "2018-04-17T19:15:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 16UmPizHsXSFmPnUi4cP_POvvVWp5ri4aMPHiQVuaCWTBGoIXL5qGBAHWdAo7xJjYdtRFC_Q1HqLmxQplgOAQRGkQ87kdz6Ywv8R9MJSpzW2H2tQBlZvH8HMDd1nqoLmot2KPn6kxvbiWMVxLNzfkSUZxYDFR2e-sQqGGr5Fo9NRtJ302D0SXsJb2rM6gHYCBc5ESRZ2mCVZ0sehuXrJu5EdjqGb3NEcDz0SloYVCS1NDlPGoivsBCp4mVQ1QHXnRwIraEb9b7R0oXvpWVbNJbRSmU5F-YLWA9vRTuzGEY-uEg_Bu_4noqto2H3klZH1HM2YZQi4SynU1R6Zt92DDwrOT5mMMq0QADVshU2gIBzhucsLAvMYWX2HIJoH4NVFGlAXNR0S0uu1Xvqq5cDhxkuja4Cy2S3WAGbetSXo-dAJ8ESyphNpKLt98Htao2ycdUuCZQPLgLXRtF7CbdbVvJibLVTea41QiZ8Jxm4dxJfgJjva-j7ZuGiB2RCDI2vxHUSvLfipWN-JcDRFq5O6DCDMRixgMQJrAETqCx9yA5tkrzaAX17p_fdf-vwAOg0LBfInXDRihKS-Y0JiYf1ZV-DDW5U4UEtciGPmzNmMjW3lkIS_8g1z-ScVYmbxHExDbqbyhjEMdk5A7EJWTmTmqRJUTaaabnA_vU6Ow_Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed236032f-6114-4167-a15d-1e1c7f88f51f", "record_id": "flaws_cloudtrail:0000268:ed236032f-6114-4167-a15d-1e1c7f88f51f", "row_index": 268, "timestamp": "2018-04-17T19:26:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed236032f-6114-4167-a15d-1e1c7f88f51f", "eventTime": "2018-04-17T19:26:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffba60ca-f662-4f21-94be-59982793bcfe", "record_id": "flaws_cloudtrail:0000269:ffba60ca-f662-4f21-94be-59982793bcfe", "row_index": 269, "timestamp": "2018-04-17T19:26:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffba60ca-f662-4f21-94be-59982793bcfe", "eventTime": "2018-04-17T19:26:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed582e84-a828-4a17-a148-6a0db4bbd96f", "record_id": "flaws_cloudtrail:0000270:ed582e84-a828-4a17-a148-6a0db4bbd96f", "row_index": 270, "timestamp": "2018-04-17T19:26:32Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed582e84-a828-4a17-a148-6a0db4bbd96f", "eventTime": "2018-04-17T19:26:32Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715a43eb-9d2a-425d-8c78-6f59755b606", "record_id": "flaws_cloudtrail:0000271:715a43eb-9d2a-425d-8c78-6f59755b606", "row_index": 271, "timestamp": "2018-04-17T19:26:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715a43eb-9d2a-425d-8c78-6f59755b606", "eventTime": "2018-04-17T19:26:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4ee8406-3020-4620-b497-e83c6504d0b6", "record_id": "flaws_cloudtrail:0000272:d4ee8406-3020-4620-b497-e83c6504d0b6", "row_index": 272, "timestamp": "2018-04-17T19:26:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4ee8406-3020-4620-b497-e83c6504d0b6", "eventTime": "2018-04-17T19:26:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484693-7dd6-46ee-8d69-d7983ddc0b51", "record_id": "flaws_cloudtrail:0000273:484693-7dd6-46ee-8d69-d7983ddc0b51", "row_index": 273, "timestamp": "2018-04-17T19:26:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484693-7dd6-46ee-8d69-d7983ddc0b51", "eventTime": "2018-04-17T19:26:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b52077-8020-4e1a-9813-48d198a2b692", "record_id": "flaws_cloudtrail:0000274:d6b52077-8020-4e1a-9813-48d198a2b692", "row_index": 274, "timestamp": "2018-04-17T19:26:33Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b52077-8020-4e1a-9813-48d198a2b692", "eventTime": "2018-04-17T19:26:33Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e66a39c7-ca9a-4e94-a943-5d628717e3f2", "record_id": "flaws_cloudtrail:0000275:e66a39c7-ca9a-4e94-a943-5d628717e3f2", "row_index": 275, "timestamp": "2018-04-17T19:26:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e66a39c7-ca9a-4e94-a943-5d628717e3f2", "eventTime": "2018-04-17T19:26:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7196ae6c-af17-4cc8-98f6-c7ceac3d0c57", "record_id": "flaws_cloudtrail:0000276:7196ae6c-af17-4cc8-98f6-c7ceac3d0c57", "row_index": 276, "timestamp": "2018-04-17T19:26:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7196ae6c-af17-4cc8-98f6-c7ceac3d0c57", "eventTime": "2018-04-17T19:26:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea2430d7-d634-4528-8358-c17cd84aa6bf", "record_id": "flaws_cloudtrail:0000277:ea2430d7-d634-4528-8358-c17cd84aa6bf", "row_index": 277, "timestamp": "2018-04-17T19:26:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea2430d7-d634-4528-8358-c17cd84aa6bf", "eventTime": "2018-04-17T19:26:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f78011-43e8-4eb8-be7a-5ba1868a11cf", "record_id": "flaws_cloudtrail:0000278:c3f78011-43e8-4eb8-be7a-5ba1868a11cf", "row_index": 278, "timestamp": "2018-04-17T19:26:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f78011-43e8-4eb8-be7a-5ba1868a11cf", "eventTime": "2018-04-17T19:26:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5e5fbe-e078-453f-8287-a10e2b65ad80", "record_id": "flaws_cloudtrail:0000279:ee5e5fbe-e078-453f-8287-a10e2b65ad80", "row_index": 279, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5e5fbe-e078-453f-8287-a10e2b65ad80", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97cd48a3-d34e-474e-b747-e373bc76b15f", "record_id": "flaws_cloudtrail:0000280:97cd48a3-d34e-474e-b747-e373bc76b15f", "row_index": 280, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97cd48a3-d34e-474e-b747-e373bc76b15f", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e085f855-77d0-4e48-9b7b-cdd1704a46b7", "record_id": "flaws_cloudtrail:0000281:e085f855-77d0-4e48-9b7b-cdd1704a46b7", "row_index": 281, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e085f855-77d0-4e48-9b7b-cdd1704a46b7", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f3baed-1fdf-4196-8965-803aa715eccf", "record_id": "flaws_cloudtrail:0000282:53f3baed-1fdf-4196-8965-803aa715eccf", "row_index": 282, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f3baed-1fdf-4196-8965-803aa715eccf", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa7b60e-ea6e-4478-ac90-888379110274", "record_id": "flaws_cloudtrail:0000283:daa7b60e-ea6e-4478-ac90-888379110274", "row_index": 283, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa7b60e-ea6e-4478-ac90-888379110274", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ef8d3c-693c-41f3-bdc3-d3b6045f58a2", "record_id": "flaws_cloudtrail:0000284:26ef8d3c-693c-41f3-bdc3-d3b6045f58a2", "row_index": 284, "timestamp": "2018-04-17T19:26:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ef8d3c-693c-41f3-bdc3-d3b6045f58a2", "eventTime": "2018-04-17T19:26:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f02496f-a208-417a-8a3d-900fbb5adfb8", "record_id": "flaws_cloudtrail:0000285:f02496f-a208-417a-8a3d-900fbb5adfb8", "row_index": 285, "timestamp": "2018-04-17T19:26:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f02496f-a208-417a-8a3d-900fbb5adfb8", "eventTime": "2018-04-17T19:26:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec1c72a0-2d2b-4cf8-b34e-56dd7b09700a", "record_id": "flaws_cloudtrail:0000286:ec1c72a0-2d2b-4cf8-b34e-56dd7b09700a", "row_index": 286, "timestamp": "2018-04-17T19:26:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec1c72a0-2d2b-4cf8-b34e-56dd7b09700a", "eventTime": "2018-04-17T19:26:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d8eb269-e415-42b1-8353-d966068f93ed3", "record_id": "flaws_cloudtrail:0000287:8d8eb269-e415-42b1-8353-d966068f93ed3", "row_index": 287, "timestamp": "2018-04-17T19:26:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d8eb269-e415-42b1-8353-d966068f93ed3", "eventTime": "2018-04-17T19:26:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5f33bd3-9db9-4a85-b029-9f3fa6f6f289", "record_id": "flaws_cloudtrail:0000288:f5f33bd3-9db9-4a85-b029-9f3fa6f6f289", "row_index": 288, "timestamp": "2018-04-17T19:26:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5f33bd3-9db9-4a85-b029-9f3fa6f6f289", "eventTime": "2018-04-17T19:26:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "398dcbb4-e63e-43d2-970f-77e2d0a1e1c4", "record_id": "flaws_cloudtrail:0000289:398dcbb4-e63e-43d2-970f-77e2d0a1e1c4", "row_index": 289, "timestamp": "2018-04-17T19:26:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "398dcbb4-e63e-43d2-970f-77e2d0a1e1c4", "eventTime": "2018-04-17T19:26:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc9d7beb-e682-47e0-9630-4a138290ce667", "record_id": "flaws_cloudtrail:0000290:cc9d7beb-e682-47e0-9630-4a138290ce667", "row_index": 290, "timestamp": "2018-04-17T19:26:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc9d7beb-e682-47e0-9630-4a138290ce667", "eventTime": "2018-04-17T19:26:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a78ba027-cd55-4a17-a7a9-6721b6ff5645", "record_id": "flaws_cloudtrail:0000291:a78ba027-cd55-4a17-a7a9-6721b6ff5645", "row_index": 291, "timestamp": "2018-04-17T19:26:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a78ba027-cd55-4a17-a7a9-6721b6ff5645", "eventTime": "2018-04-17T19:26:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f705d1a3-2d0a-4c7a-a886-14133ec964", "record_id": "flaws_cloudtrail:0000292:f705d1a3-2d0a-4c7a-a886-14133ec964", "row_index": 292, "timestamp": "2018-04-17T19:26:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f705d1a3-2d0a-4c7a-a886-14133ec964", "eventTime": "2018-04-17T19:26:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006938d-ba83-4eb8-a609-9b95f51a6ae4", "record_id": "flaws_cloudtrail:0000293:006938d-ba83-4eb8-a609-9b95f51a6ae4", "row_index": 293, "timestamp": "2018-04-17T19:26:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006938d-ba83-4eb8-a609-9b95f51a6ae4", "eventTime": "2018-04-17T19:26:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c96504c-85a9-4e41-aae9-470d01b37f68", "record_id": "flaws_cloudtrail:0000294:5c96504c-85a9-4e41-aae9-470d01b37f68", "row_index": 294, "timestamp": "2018-04-17T19:26:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c96504c-85a9-4e41-aae9-470d01b37f68", "eventTime": "2018-04-17T19:26:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce1bdb55-01bf-4585-b3c0-33313e1316e7", "record_id": "flaws_cloudtrail:0000295:ce1bdb55-01bf-4585-b3c0-33313e1316e7", "row_index": 295, "timestamp": "2018-04-17T19:26:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce1bdb55-01bf-4585-b3c0-33313e1316e7", "eventTime": "2018-04-17T19:26:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c93f5c9-e8c7-41cf-9660-f444e2e381738", "record_id": "flaws_cloudtrail:0000296:6c93f5c9-e8c7-41cf-9660-f444e2e381738", "row_index": 296, "timestamp": "2018-04-17T19:26:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c93f5c9-e8c7-41cf-9660-f444e2e381738", "eventTime": "2018-04-17T19:26:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ACv6LYyTuHwKA_Qbm7QeC7G-NGojSk_RKkwETVmlirGptHk8O-Aarr33_xwD1_5g3u5uM8tdSoyjEwuH4QHwGhoimuz0sIaMosVuPSDYmSuW95KvdV-UwujlW2cWZfXbOaFvHjDZwgzIkJhjWDp1kCOjAnX8OrDfPPzEHXEiWb6Mov-btk2VrCDXv_iOxkAtbEb3d7p0yQ_5q6mldG77spNRl6Fg1KALEH38xOiZDLoSBQcXblwnqC-KrRjpNw1TU8fiMT5C3rc5aZ5wBEQxRxfdNu4rMsvKMYnLlqTGv_RsUd7Eq-A2Kp_RKjUgsPQTsRtE2k_3-qqCxjDaL3nfO9cDgkrLU57ymRx9R2eUiGyQzVw6JPVd-_m_Hxo1qWJKmqqXXpVR2-Vqu9WYYUJylTAi0Ttp5NYkujaC_cAlpORZCbC02xyzsrdM55d9ApkdO1amYzxtxQ2adYSHFaUjq3ncgmLsvvTYAhc0MJvJfWHO1Fc18aCaO12_VSpML8dkj_O4lIv1Ffr-khZm86bJsOhdWY9ad4ftjMWopGoRlNydjdPe2_jtTYUxjDsDdeRR56LJPdp5pJawqiXrr2y7XNtCPq2T9SDTmJE_0urvDQY8RljXQn1byVzF4uZyv4ZAm_RN2lFxJwalgM-3CQHa26yB_R2TV0eVw1Kkog", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887ae1ab-36d2-4a8c-997f-6ccb53657e74", "record_id": "flaws_cloudtrail:0000297:887ae1ab-36d2-4a8c-997f-6ccb53657e74", "row_index": 297, "timestamp": "2018-04-17T19:26:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887ae1ab-36d2-4a8c-997f-6ccb53657e74", "eventTime": "2018-04-17T19:26:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -lCo9lbE7jQMqnLS4kfZ543tumXUByD7V1PMRQ-3gMzzXjZQUkyjep2r2ew79_IIyvd3YLurkJ2qE0dCoyfpN3E5YIOfYpRXelE-3PDrb81kBDz_UsXBaHd1VKvRDMbUcws2XUMvjRWvOCtoABvz0Sfc2xtE_dha6r3QQEdyfCC6LxAEoLBTwqfAoJC-zzmzuGQGq5yeiCn2_K6JpHClR2aFi4vHikkBODWB12IyrIRF_mJ55fb-RjyLOZy2Iy_xucxQevV1cy7xp2vMlBnKzjA7cV1FGo4a3DAHBYc4A5W5cG2qdnujhMtLL0z_GLO8a43aBsqzfd9J83tvEy4K4sIMquihka8j2ppxHl8kmjCOTJ2SkkWyuPPOQ3MZ3HTmSNr5ANEh76JP3m2ilNhSGjJvL2fIhBBXkLsftpc1raW4O1VcOixgcBr_W3sYtttXTxkUnshXFkXKgl1Q7g2Zmv_eVYG_1aPIJgTBA75qB4ZFnmb7SvR3BPIkdiFDmha7Ua-yMWn799P_sUbF9GSvuR7m5NoRTbrptyreLoLEDNpajZpbop_T2f_zyvtTWSjEl9XZZ3llfCWsainmg5dpLXEaeYuUdVfRcBWBjHgGU-9owPZKAb2Ds4Rk8ZfBlRUTUTwFIsw6sReQ68tlST3HSabuksMKaGNUVeVdhoXa", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdcb5fc5-590a-480e-bd66-a21a003ae97a", "record_id": "flaws_cloudtrail:0000298:cdcb5fc5-590a-480e-bd66-a21a003ae97a", "row_index": 298, "timestamp": "2018-04-17T19:26:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdcb5fc5-590a-480e-bd66-a21a003ae97a", "eventTime": "2018-04-17T19:26:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f5ec22c-ea51-41a8-9622-0be93436ccc7", "record_id": "flaws_cloudtrail:0000299:4f5ec22c-ea51-41a8-9622-0be93436ccc7", "row_index": 299, "timestamp": "2018-04-17T19:26:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f5ec22c-ea51-41a8-9622-0be93436ccc7", "eventTime": "2018-04-17T19:26:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dfa4fec-a730-454b-854d-dd4a0a3f6676", "record_id": "flaws_cloudtrail:0000300:0dfa4fec-a730-454b-854d-dd4a0a3f6676", "row_index": 300, "timestamp": "2018-04-17T19:26:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dfa4fec-a730-454b-854d-dd4a0a3f6676", "eventTime": "2018-04-17T19:26:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12fa4cd5-63f4-4042-bfb0-0bc2addb9380", "record_id": "flaws_cloudtrail:0000301:12fa4cd5-63f4-4042-bfb0-0bc2addb9380", "row_index": 301, "timestamp": "2018-04-17T19:26:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12fa4cd5-63f4-4042-bfb0-0bc2addb9380", "eventTime": "2018-04-17T19:26:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b212c447-b251-4e64-a01c-a7cef0a08204", "record_id": "flaws_cloudtrail:0000302:b212c447-b251-4e64-a01c-a7cef0a08204", "row_index": 302, "timestamp": "2018-04-17T19:26:41Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b212c447-b251-4e64-a01c-a7cef0a08204", "eventTime": "2018-04-17T19:26:41Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12e7a6af-5164-49c1-868d-71cd8e27b16e", "record_id": "flaws_cloudtrail:0000303:12e7a6af-5164-49c1-868d-71cd8e27b16e", "row_index": 303, "timestamp": "2018-04-17T19:26:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12e7a6af-5164-49c1-868d-71cd8e27b16e", "eventTime": "2018-04-17T19:26:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badff646-595e-4627-9b36-5aa67dea9746", "record_id": "flaws_cloudtrail:0000304:badff646-595e-4627-9b36-5aa67dea9746", "row_index": 304, "timestamp": "2018-04-17T19:26:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badff646-595e-4627-9b36-5aa67dea9746", "eventTime": "2018-04-17T19:26:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31f15a00-a685-427d-918f-01b48150a1cf", "record_id": "flaws_cloudtrail:0000305:31f15a00-a685-427d-918f-01b48150a1cf", "row_index": 305, "timestamp": "2018-04-17T19:26:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31f15a00-a685-427d-918f-01b48150a1cf", "eventTime": "2018-04-17T19:26:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696001-bde2-4cd3-ba85-a79bb83cdc35", "record_id": "flaws_cloudtrail:0000306:696001-bde2-4cd3-ba85-a79bb83cdc35", "row_index": 306, "timestamp": "2018-04-17T19:26:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696001-bde2-4cd3-ba85-a79bb83cdc35", "eventTime": "2018-04-17T19:26:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Zu-gSF5oRwPR420QrJ95KnDyt2w9m_e7V4bZ97xWckMs3W7PmBpBYv0Oi3BENeSeYVpwZNR8iZShipmo97h62KidoN5oBvM9Xu3-OFopu3nox4KXBDYtBhiOkSgayKiXfSgk5eA7WY2RcYqO3Y0DOaboVVxAYmaNQzAPmtd0K59jOAVyf8owr94rDFEovCTrXOaps-VPCN842wb43Hy6AEV1Jn80xVLlnTNs-VJ912YcWQpX8VtKMmjrQwmVUhdqqV0xcKIArVhxYCBMaBNomT1g3hRHcSoeY77RCsqrAmpd6-1nYQ8xUI0cTkw7S3ygPgf53eSIgn3vZaDymuSJTMncciOM73gb3TVRTNq7RjuHb1IGFR1bDxFe2sITHDOGXfJU_Ai_zEmvTRYvKk7yxDzhabuAKK1kjIhlW0M4sGwRuAfIzWcG4dR-1ranrJU61FWkAx2KvDnGUTVfMtGyvNbTjP08Pi-Qfd3WuUgFWCr5WGZfClYN1Nim_1RfPsRsBFtGOzMsdHrUbmdQBenPN76PqnQ_VaW3CoFj8DiwmRWT8N1mJdRReWExb5XmPGk0A0ogtQim6SrRcVxkYrF7U-7T6M5v26byC_UcodAQtksSONT5EoX0clf-tajXoaNd2X_YRYpT8Wtwwjb8egupFU63gRQ32jyHJQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c192d487-4c76-4003-bf7b-496dfb9547ad", "record_id": "flaws_cloudtrail:0000307:c192d487-4c76-4003-bf7b-496dfb9547ad", "row_index": 307, "timestamp": "2018-04-17T19:26:43Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c192d487-4c76-4003-bf7b-496dfb9547ad", "eventTime": "2018-04-17T19:26:43Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6425cb82-a945-47b8-a499-b3a3fdbfb4e5", "record_id": "flaws_cloudtrail:0000308:6425cb82-a945-47b8-a499-b3a3fdbfb4e5", "row_index": 308, "timestamp": "2018-04-17T19:26:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6425cb82-a945-47b8-a499-b3a3fdbfb4e5", "eventTime": "2018-04-17T19:26:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cc2697c-7a19-483e-b5f8-4a97f7d25fee", "record_id": "flaws_cloudtrail:0000309:9cc2697c-7a19-483e-b5f8-4a97f7d25fee", "row_index": 309, "timestamp": "2018-04-17T19:26:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cc2697c-7a19-483e-b5f8-4a97f7d25fee", "eventTime": "2018-04-17T19:26:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7e342f-3cbf-473c-a569-f0ba9e40b736", "record_id": "flaws_cloudtrail:0000310:9d7e342f-3cbf-473c-a569-f0ba9e40b736", "row_index": 310, "timestamp": "2018-04-17T19:26:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7e342f-3cbf-473c-a569-f0ba9e40b736", "eventTime": "2018-04-17T19:26:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94253be4-839e-4b65-a7b7-18112db51d", "record_id": "flaws_cloudtrail:0000311:94253be4-839e-4b65-a7b7-18112db51d", "row_index": 311, "timestamp": "2018-04-17T19:26:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94253be4-839e-4b65-a7b7-18112db51d", "eventTime": "2018-04-17T19:26:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6SPaEpid-E_Vx4vj_B7bA-BHdF2Nvva_xlewoR2cDSGuPDKSXOcp3NFnydg-wgWcNcJFljEqsQ7xc0ETE9sqxricGoyrT9yAiF8OseK_0Y1fGEhbt_TD97elzFNgRrDW6GI29IMDoXLKmsGkeJXu5BZBQKeiySN2vClgBKDVKNAj3JFtorCqek6RnQznqaRzupA861VVUQWRnqCtrnvjk0Ybuv_rL4DhjsPx_sz7s0jTCH6oBy_ZoL1ogsPBkpGx7Jz2L2rZ3mYQBtWLcF9kt4y6uG3sSfaEQb4ATtXgdApdCX3mQLfEXdbyMPTvsMDGaj-_5TFL7WUSwJnEPYcxXXrVLyN9YG8w0nqV3YEpaQiZengsFENaQMSJVOSThVOLn-9Ojsbr7hj9PHYrEbzW-PmXUdpc4-CxyBAcLfBRW6_5Dc5BTbhoxQkIk3N89ybu7iB5BBjyLVrqcG-bllzv-dY_XXBxBLIsHAE2BAKzJ5lDK6sOYAHcBtFHevfUUB5-545c2dM2sVrLRoZdLRWkeVRDZ4lIn8DtDLSuFAhMT1sYUVV6SUGJpeazExHNI77yCRee1W_DS6QL6hJInSaqXWNJbt2t4oWxowiML9i3pRD__wxpLClwHTab5AOqXmsqzUsH51YVrgwoo2g1ZRWcFhCT60AtWhUkgQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33e4c697-9d1c-4712-820d-6b025e1356a9", "record_id": "flaws_cloudtrail:0000312:33e4c697-9d1c-4712-820d-6b025e1356a9", "row_index": 312, "timestamp": "2018-04-17T19:26:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33e4c697-9d1c-4712-820d-6b025e1356a9", "eventTime": "2018-04-17T19:26:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dcf6162-2ea8-4ff3-bf8d-a29a0e956117", "record_id": "flaws_cloudtrail:0000313:0dcf6162-2ea8-4ff3-bf8d-a29a0e956117", "row_index": 313, "timestamp": "2018-04-17T19:26:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dcf6162-2ea8-4ff3-bf8d-a29a0e956117", "eventTime": "2018-04-17T19:26:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ec30c9-4457-4042-83ce-007c8882e4d2", "record_id": "flaws_cloudtrail:0000314:36ec30c9-4457-4042-83ce-007c8882e4d2", "row_index": 314, "timestamp": "2018-04-17T19:26:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ec30c9-4457-4042-83ce-007c8882e4d2", "eventTime": "2018-04-17T19:26:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dbadb24-828a-44ea-a379-5f2e539db5cf", "record_id": "flaws_cloudtrail:0000315:8dbadb24-828a-44ea-a379-5f2e539db5cf", "row_index": 315, "timestamp": "2018-04-17T19:26:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dbadb24-828a-44ea-a379-5f2e539db5cf", "eventTime": "2018-04-17T19:26:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8fe2595-2495-4e51-92c3-7f49f5c9159c", "record_id": "flaws_cloudtrail:0000316:b8fe2595-2495-4e51-92c3-7f49f5c9159c", "row_index": 316, "timestamp": "2018-04-17T19:26:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8fe2595-2495-4e51-92c3-7f49f5c9159c", "eventTime": "2018-04-17T19:26:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e8ecbb-0f64-4ebe-9404-6d585dcdfd2e", "record_id": "flaws_cloudtrail:0000317:e7e8ecbb-0f64-4ebe-9404-6d585dcdfd2e", "row_index": 317, "timestamp": "2018-04-17T19:26:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e8ecbb-0f64-4ebe-9404-6d585dcdfd2e", "eventTime": "2018-04-17T19:26:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46feb395-aca9-4cb5-93b7-b66a6c785ca0", "record_id": "flaws_cloudtrail:0000318:46feb395-aca9-4cb5-93b7-b66a6c785ca0", "row_index": 318, "timestamp": "2018-04-17T19:26:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46feb395-aca9-4cb5-93b7-b66a6c785ca0", "eventTime": "2018-04-17T19:26:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "473bd631-adff-49b5-9c40-30c144ff76a7", "record_id": "flaws_cloudtrail:0000319:473bd631-adff-49b5-9c40-30c144ff76a7", "row_index": 319, "timestamp": "2018-04-17T19:26:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "473bd631-adff-49b5-9c40-30c144ff76a7", "eventTime": "2018-04-17T19:26:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be5c02d1-51d3-42a3-bcb9-004034f44b", "record_id": "flaws_cloudtrail:0000320:be5c02d1-51d3-42a3-bcb9-004034f44b", "row_index": 320, "timestamp": "2018-04-17T19:26:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be5c02d1-51d3-42a3-bcb9-004034f44b", "eventTime": "2018-04-17T19:26:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a1b3e8-cca2-436a-9237-0a8fc7ba96de", "record_id": "flaws_cloudtrail:0000321:08a1b3e8-cca2-436a-9237-0a8fc7ba96de", "row_index": 321, "timestamp": "2018-04-17T19:26:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a1b3e8-cca2-436a-9237-0a8fc7ba96de", "eventTime": "2018-04-17T19:26:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6209aa46-a6cd-417f-bbd3-39a9a687fe01", "record_id": "flaws_cloudtrail:0000322:6209aa46-a6cd-417f-bbd3-39a9a687fe01", "row_index": 322, "timestamp": "2018-04-17T19:26:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6209aa46-a6cd-417f-bbd3-39a9a687fe01", "eventTime": "2018-04-17T19:26:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3cd9cd6-23a7-4aca-a799-6a3bf435f1f3", "record_id": "flaws_cloudtrail:0000323:a3cd9cd6-23a7-4aca-a799-6a3bf435f1f3", "row_index": 323, "timestamp": "2018-04-17T19:26:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3cd9cd6-23a7-4aca-a799-6a3bf435f1f3", "eventTime": "2018-04-17T19:26:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nSl0tHnwdruI9nb_2fftv_rdtwoY923ZdhCYFffL2xzOJLE7HeOaJRnl12xn6P3DxI3UVNL5k3UwFYKcRDX5JBszS93aRWXyW6YtJHiozCxt__uDFDXCPcpnyEnzu9qw-bXBy8_ieSeWHB0EC9DyGimWVvy41MbnIU9xOQQs7tXh_qYTjUAegH9mKRjudndW8v-ORXtzD3ekh06zURYWVzYMF1nRAcVfyxZqa46nObr3VZFgwTGQRSCliKi74nvAqMCZ7AW_oY6apDX3a_QLmqu2scNpMeK5MPfNDkGlNjd1PcJgvSrNDU4zmNsWigBB9hYGwJD-bpj3K7p_29QYT1rmllj-icXq0H2CPv5BkuUg5YesYFelGz2kTxLRzHlx-QLhO9Qiy5Qt-QrE23UzNJ-kYW0LK4qH5z6EKJcWM5vTHQDHkw0dYoajti-lqGPK3jKVJWhujMX4nFKDiJqzZLg3ij3mSYbAyotePG58slXH9vLnvqbvYd47O5BBrHTgnd-sgkZU6lfNS0MNJZ-i4aZW8pn-4GgP_pbx2OHIpIVa02HHqOzqMF9Q7QSx76bz8kyLl0MHGulJMkPEk7ALI7kSqo42T9KDFKPlD3poiRUWWfZb7cQImyEV8sUg1-H9uz-IUYcUCx8Opm3uhTkK0ago7k9yqlZ2aQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c642014e-1fef-4cd8-a761-2d662472d5", "record_id": "flaws_cloudtrail:0000324:1c642014e-1fef-4cd8-a761-2d662472d5", "row_index": 324, "timestamp": "2018-04-17T19:26:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c642014e-1fef-4cd8-a761-2d662472d5", "eventTime": "2018-04-17T19:26:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a846520a8-fa3f-43fa-9d80-6a7dbcceeeb0", "record_id": "flaws_cloudtrail:0000325:a846520a8-fa3f-43fa-9d80-6a7dbcceeeb0", "row_index": 325, "timestamp": "2018-04-17T19:26:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a846520a8-fa3f-43fa-9d80-6a7dbcceeeb0", "eventTime": "2018-04-17T19:26:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a85ddf-1305-4a80-942c-f41644da52ad", "record_id": "flaws_cloudtrail:0000326:88a85ddf-1305-4a80-942c-f41644da52ad", "row_index": 326, "timestamp": "2018-04-17T19:26:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a85ddf-1305-4a80-942c-f41644da52ad", "eventTime": "2018-04-17T19:26:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2eba085-e857-4393-8d83-8cffb4ee6a9f", "record_id": "flaws_cloudtrail:0000327:f2eba085-e857-4393-8d83-8cffb4ee6a9f", "row_index": 327, "timestamp": "2018-04-17T19:26:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2eba085-e857-4393-8d83-8cffb4ee6a9f", "eventTime": "2018-04-17T19:26:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c421509b-70fa-4dcb-8876-8ddeb60c8c20", "record_id": "flaws_cloudtrail:0000328:c421509b-70fa-4dcb-8876-8ddeb60c8c20", "row_index": 328, "timestamp": "2018-04-17T19:26:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c421509b-70fa-4dcb-8876-8ddeb60c8c20", "eventTime": "2018-04-17T19:26:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 57sGiLiO7pN02ss60TuudSAOmVKwpeOiB6TUEVBHElZwTDIYJDOx04kkDWF1wW_tQXwTelrNAgnscgHbKWfBZb35aGjk1Zmu0EQIEt2P6ESdDGp16Jx50d-Fvv_cn-w5CNWVcMI7nchbrl0QS-wk_a5N3_N1PZK07QKDTfG_b_bwGBWvefxRLV6stEANWW3gLzwNPmJnWU7SZHddcDFeL6klYwAtprbPEcYSeSBork5dRbLRDSOnnyc3_O4sitt--7t9PpRUFvdouP2ZvqU_I_WCSXz5QZ2Qhngp7AnZuDMLkeoDwT4U-VvZdto40WMBjBkjqU45ktGghudb5JfoaNnvTCn3rotr7gJ0wpx3_p_s2mm11PGfzhiub9PQG20OHE9pwhRldsXN3PbtzBzuGsASmC7JMlSXZVs1_rniCN60zgF3Lia2NGp9WJpYNw1k2XqyqZ9XzzTB6YYq1uy9VNsKRS7FTsEbBSjoRZg_90vVDFWlkd43Mnra74kNQv_-ehF8__I-QHLBoBRjW6IvUe_QJ5NMH0zajDDw6o_nHub0D58jNu-bt3HYOC1PUzZ1jZHgPGQZAlMPzA2UMDgroTNvpIU0SjlWPjQeVGQaIR1mY2ML2R_fsn_3aAMNvEPszqUxEqrF3VMEq91Hj7XGmONxgUG60a_S4bs3eik", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8bf0415-cf3c-4ed2-9c2b-b2e0e0edecb2", "record_id": "flaws_cloudtrail:0000329:a8bf0415-cf3c-4ed2-9c2b-b2e0e0edecb2", "row_index": 329, "timestamp": "2018-04-17T19:26:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8bf0415-cf3c-4ed2-9c2b-b2e0e0edecb2", "eventTime": "2018-04-17T19:26:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490e20c2-a4a0-4429-88a6-b8ac3f4fd3e2", "record_id": "flaws_cloudtrail:0000330:490e20c2-a4a0-4429-88a6-b8ac3f4fd3e2", "row_index": 330, "timestamp": "2018-04-17T19:26:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490e20c2-a4a0-4429-88a6-b8ac3f4fd3e2", "eventTime": "2018-04-17T19:26:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7ff9c65-342c-4cde-86ab-550e17aa8933", "record_id": "flaws_cloudtrail:0000331:e7ff9c65-342c-4cde-86ab-550e17aa8933", "row_index": 331, "timestamp": "2018-04-17T19:26:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7ff9c65-342c-4cde-86ab-550e17aa8933", "eventTime": "2018-04-17T19:26:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9b6030d-2804-4180-b7d1-006486a7919b", "record_id": "flaws_cloudtrail:0000332:d9b6030d-2804-4180-b7d1-006486a7919b", "row_index": 332, "timestamp": "2018-04-17T19:26:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9b6030d-2804-4180-b7d1-006486a7919b", "eventTime": "2018-04-17T19:26:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2f5f1fa-e567-4d5e-a10c-306a43a1004c", "record_id": "flaws_cloudtrail:0000333:f2f5f1fa-e567-4d5e-a10c-306a43a1004c", "row_index": 333, "timestamp": "2018-04-17T19:26:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2f5f1fa-e567-4d5e-a10c-306a43a1004c", "eventTime": "2018-04-17T19:26:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d813e72a-8bf3-4d16-afe2-39e5edb33769", "record_id": "flaws_cloudtrail:0000334:d813e72a-8bf3-4d16-afe2-39e5edb33769", "row_index": 334, "timestamp": "2018-04-17T19:26:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d813e72a-8bf3-4d16-afe2-39e5edb33769", "eventTime": "2018-04-17T19:26:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0594ca6f-f553-4cd5-8e0f-65e9497f0931", "record_id": "flaws_cloudtrail:0000335:0594ca6f-f553-4cd5-8e0f-65e9497f0931", "row_index": 335, "timestamp": "2018-04-17T19:26:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0594ca6f-f553-4cd5-8e0f-65e9497f0931", "eventTime": "2018-04-17T19:26:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988067dda-c471-43fc-94b1-00bd4cd320b1", "record_id": "flaws_cloudtrail:0000336:988067dda-c471-43fc-94b1-00bd4cd320b1", "row_index": 336, "timestamp": "2018-04-17T19:26:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988067dda-c471-43fc-94b1-00bd4cd320b1", "eventTime": "2018-04-17T19:26:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf633b99-b0ef-40d7-9b6b-e980a4ff4e69", "record_id": "flaws_cloudtrail:0000337:bf633b99-b0ef-40d7-9b6b-e980a4ff4e69", "row_index": 337, "timestamp": "2018-04-17T19:26:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf633b99-b0ef-40d7-9b6b-e980a4ff4e69", "eventTime": "2018-04-17T19:26:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e05d13-da71-4dd1-9484-f270e693f8d8", "record_id": "flaws_cloudtrail:0000338:84e05d13-da71-4dd1-9484-f270e693f8d8", "row_index": 338, "timestamp": "2018-04-17T19:26:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e05d13-da71-4dd1-9484-f270e693f8d8", "eventTime": "2018-04-17T19:26:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wlBw2cqSeRVq9fWNJANizqh7pKC4Jd8IGTQt69R3FqCJrISbWwzAedNHw6d7_HkIi-6T9b62uRurXVwSckfVUWjDkXa3D-I-60_zJG1oAjaEvODMVkg-dz_cUYurcnMvKSNPDib2SgDM2ShdXdXQPqJlqRnbrdXAT9Te0Oar1idhKaFxbWSZiZNXrsMm9v0BBD1cNdrn4SZ-zzHjL4MKBlsyzaI1p7UsGUXjGU3jtuUCRtE7ORJsa2OfQHh0uOneEbXxzJSiGgHujSsxyPK6jju5IdjhfuBH-_01dSH_ppgogDuXV_08z5VQjZHMVeiehXIMb4JYZd8RwalXVGIiLgHbHSm2ySpxm2YMOwxXbfSGK3Xkx3Lt-prbs-Ux9weEvZQIJ1WNh0U3X7ck4HsX7P7IjmDqjrcZdmOgMpYNuB87GoF3bpr4ZGdk-dkzI-gkRisUnIW1vg3476Nlu-1JgLlEDjQj5H2S1xlOUFEVKZ_Mv9hsEE46-u53XwHGmIP4ibnrosbhQiY98a5VebMdeQ4M1mY7qM3ctI5u0vXm16GqPksBPAEl7HgvsBJ7HHqECoZME0H39nVoVMdNO8-YXRB9lhZo6RCtK9RAAzj0yNd_ReLgzmopPiYzlpmT-NLtvkl13IXfWulnknC6oytg_07JkB481Mdf_7jA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5d84cf-0b01-4a52-8cf7-900a1b14d5f5", "record_id": "flaws_cloudtrail:0000339:ca5d84cf-0b01-4a52-8cf7-900a1b14d5f5", "row_index": 339, "timestamp": "2018-04-17T19:26:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5d84cf-0b01-4a52-8cf7-900a1b14d5f5", "eventTime": "2018-04-17T19:26:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0143ed3-40c4-4689-8ceb-c20adabab2ac", "record_id": "flaws_cloudtrail:0000340:a0143ed3-40c4-4689-8ceb-c20adabab2ac", "row_index": 340, "timestamp": "2018-04-17T19:26:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0143ed3-40c4-4689-8ceb-c20adabab2ac", "eventTime": "2018-04-17T19:26:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7DivjK7lNVNvWE7SAM3C_XmaR2aMRPVBsDRjGDDqKsxQ1qIWeQFY3_I70Jvky24MZVA1-shrdr_LniwZOMAQeBOgOv3mWwbWpo5Dk9IdQQW4kyXkLAGMgSFKXQZirKJNkvcjQ1LQ81xPBWucqcrpeqTvlCurSXYTuBUzhuAQ9r_tgf5tBabqVY3s3m1ZyJ6-Agg2zyvwrrqQ3tcgUMthK8EdRGUgAbMDK8uhhSU3kae9jyY6UjkEurkDq0G6-f0KtRwpVpaa2Ou7LUWLCVS0GEjOa0NGkw89aQesVixdb5sQ2piqgbL7OWmninIPfrgdYVH0BQx5JZmfW0eSKf5ErubkDf8beyCXLRN8oM02-s1pGZ1f2Llwo3jeRiPGQza7YBKN-I_snGXy19PUBVCeK_DPenaxO6IICVmPBpehuYBoKbI5UHB_7sGbcSdLksMrz6l8n6iRIQJMtQE3LDsnENYjLYWdg6RXHi43kVxffwQ6QO31Iq2SOJwaHtWD4raCIblS4fQJgtiGw-ssQ91rBPrNY5XyXiD5t4fkSBk6gpQW4gsJEnikSI9KtpwR4C30O4lN2gwXaUTHZEyBD_0kctM6gI2mXeZsf4AyhcbKGs_YysbJTdrq3RF5jKlSFLxL7Oqh8MUiqcVHrSzdz2X7FZlBpw_-AC3TlVTbsw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c65a034-33fd-493d-b854-8182c2795cd8", "record_id": "flaws_cloudtrail:0000341:4c65a034-33fd-493d-b854-8182c2795cd8", "row_index": 341, "timestamp": "2018-04-17T19:26:53Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c65a034-33fd-493d-b854-8182c2795cd8", "eventTime": "2018-04-17T19:26:53Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b1c1ed-6a06-443b-8ec7-779322c4", "record_id": "flaws_cloudtrail:0000342:37b1c1ed-6a06-443b-8ec7-779322c4", "row_index": 342, "timestamp": "2018-04-17T19:26:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b1c1ed-6a06-443b-8ec7-779322c4", "eventTime": "2018-04-17T19:26:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bebec6a3-1747-44a7-aa0c-8ea292c4c2aa", "record_id": "flaws_cloudtrail:0000343:bebec6a3-1747-44a7-aa0c-8ea292c4c2aa", "row_index": 343, "timestamp": "2018-04-17T19:26:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bebec6a3-1747-44a7-aa0c-8ea292c4c2aa", "eventTime": "2018-04-17T19:26:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b94a14-cd5e-42ce-bbcd-ca2fb1182b07", "record_id": "flaws_cloudtrail:0000344:a2b94a14-cd5e-42ce-bbcd-ca2fb1182b07", "row_index": 344, "timestamp": "2018-04-17T19:26:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b94a14-cd5e-42ce-bbcd-ca2fb1182b07", "eventTime": "2018-04-17T19:26:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99132cc-e0fd-4f82-854e-1bac01f6b428", "record_id": "flaws_cloudtrail:0000345:c99132cc-e0fd-4f82-854e-1bac01f6b428", "row_index": 345, "timestamp": "2018-04-17T19:26:54Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99132cc-e0fd-4f82-854e-1bac01f6b428", "eventTime": "2018-04-17T19:26:54Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d648491-ea83-4d13-b116-e77de3c862ca", "record_id": "flaws_cloudtrail:0000346:e1d648491-ea83-4d13-b116-e77de3c862ca", "row_index": 346, "timestamp": "2018-04-17T19:26:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d648491-ea83-4d13-b116-e77de3c862ca", "eventTime": "2018-04-17T19:26:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65a7887d-be05-418c-9863-22591ba8b7e3", "record_id": "flaws_cloudtrail:0000347:65a7887d-be05-418c-9863-22591ba8b7e3", "row_index": 347, "timestamp": "2018-04-17T19:26:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65a7887d-be05-418c-9863-22591ba8b7e3", "eventTime": "2018-04-17T19:26:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4629ae83-2d15-4196-addc-5c6dbc198ad6", "record_id": "flaws_cloudtrail:0000348:4629ae83-2d15-4196-addc-5c6dbc198ad6", "row_index": 348, "timestamp": "2018-04-17T19:26:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4629ae83-2d15-4196-addc-5c6dbc198ad6", "eventTime": "2018-04-17T19:26:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b071ff6-8389-4adc-a65d-dd4eea95845b", "record_id": "flaws_cloudtrail:0000349:9b071ff6-8389-4adc-a65d-dd4eea95845b", "row_index": 349, "timestamp": "2018-04-17T19:26:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b071ff6-8389-4adc-a65d-dd4eea95845b", "eventTime": "2018-04-17T19:26:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6686c6d4-6eb0-41f1-b8e0-567492b62780", "record_id": "flaws_cloudtrail:0000350:6686c6d4-6eb0-41f1-b8e0-567492b62780", "row_index": 350, "timestamp": "2018-04-17T19:26:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6686c6d4-6eb0-41f1-b8e0-567492b62780", "eventTime": "2018-04-17T19:26:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "777984e1-3d6e-445b-88fc-5318e5d9c01f", "record_id": "flaws_cloudtrail:0000351:777984e1-3d6e-445b-88fc-5318e5d9c01f", "row_index": 351, "timestamp": "2018-04-17T19:26:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "777984e1-3d6e-445b-88fc-5318e5d9c01f", "eventTime": "2018-04-17T19:26:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ceb5520-aa67-44e5-a6ac-8d6196b999cb", "record_id": "flaws_cloudtrail:0000352:0ceb5520-aa67-44e5-a6ac-8d6196b999cb", "row_index": 352, "timestamp": "2018-04-17T19:26:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ceb5520-aa67-44e5-a6ac-8d6196b999cb", "eventTime": "2018-04-17T19:26:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: pw5s3SxusG3oki3n3tUTz0UYCD5tXXAG00fok--LLo4v0-9XoiKdKPoIf6esZ8VNW1PBnXpxOloPlsbEAXnELEgOZ5-1ZmFqWty-fj9L-TwBhyUogRGOsFhpgabPO-F0mH6eHTVi1rKOLMn_HF_qoSqBgicMUsmhsJ-gTXmbHOnZcCoA-o_KgWGuEw3ZB3rDsNO0sknXczu8Y33PIqGdFSvtNoDWrZFfyEZTA0zv5VKxK6jooScoNXR8ltlwO0SHCkSNpZDLGjj2aFF5q_NdPnU_j5gAlXxhljvlTR-uOzNEJ2dE_0GTzGrK_azJtP6ZmHFdNwnGPa2vTHOSdoboft_YDpsqtJM0WxYhg8yoz8ZluVWgym9dMhxrnFbuQRCA9UQuV_BhLSXGqUDWNqSZqr9mk4CTxec9s1mzdq8HbGxIW0B9azXMot_J_X9tyzRI2vTajbz1-PsvlYE5b4g7ZzSn3GE9MMm2ui5JmbqubuzewPoF85LpvNUpnhnZpxcL4lAePF3xeRBGRWNEXXvQ_AyLNKzrh5DiufXCXgMYcxMRlq0_e9n1mDuExwv8dhz_FI5-vmF4McpYOaMn0dlXBrOogmasBuv5iSHKGFGnFBVFKKoXkmfcgf-i6ZluhzJgSpF7b_fn5i001iYuxUYGo4neohu_HjH_zw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "878e4a9a-d71b-4d6d-b351-c9254c7a3bb7", "record_id": "flaws_cloudtrail:0000353:878e4a9a-d71b-4d6d-b351-c9254c7a3bb7", "row_index": 353, "timestamp": "2018-04-17T19:26:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "878e4a9a-d71b-4d6d-b351-c9254c7a3bb7", "eventTime": "2018-04-17T19:26:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a1b3db9-7dce-4912-bbc1-6dc9f046330b1", "record_id": "flaws_cloudtrail:0000354:5a1b3db9-7dce-4912-bbc1-6dc9f046330b1", "row_index": 354, "timestamp": "2018-04-17T19:26:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a1b3db9-7dce-4912-bbc1-6dc9f046330b1", "eventTime": "2018-04-17T19:26:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f5b0430-5fb0-45d1-8dc9-3e125f8515bd", "record_id": "flaws_cloudtrail:0000355:4f5b0430-5fb0-45d1-8dc9-3e125f8515bd", "row_index": 355, "timestamp": "2018-04-17T19:26:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f5b0430-5fb0-45d1-8dc9-3e125f8515bd", "eventTime": "2018-04-17T19:26:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268e798a-ef44-438f-bb81-f66b9527dae1", "record_id": "flaws_cloudtrail:0000356:268e798a-ef44-438f-bb81-f66b9527dae1", "row_index": 356, "timestamp": "2018-04-17T19:26:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268e798a-ef44-438f-bb81-f66b9527dae1", "eventTime": "2018-04-17T19:26:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9eeaf58-5b29-4b5d-a9db-5cb61ecc2b9d", "record_id": "flaws_cloudtrail:0000357:d9eeaf58-5b29-4b5d-a9db-5cb61ecc2b9d", "row_index": 357, "timestamp": "2018-04-17T19:26:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9eeaf58-5b29-4b5d-a9db-5cb61ecc2b9d", "eventTime": "2018-04-17T19:26:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f913730ef-aa45-466d-adbb-c9e0c4ad672b", "record_id": "flaws_cloudtrail:0000358:f913730ef-aa45-466d-adbb-c9e0c4ad672b", "row_index": 358, "timestamp": "2018-04-17T19:26:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f913730ef-aa45-466d-adbb-c9e0c4ad672b", "eventTime": "2018-04-17T19:26:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0fe06d3-02eb-473a-8ffc-ab5ce0c475de", "record_id": "flaws_cloudtrail:0000359:e0fe06d3-02eb-473a-8ffc-ab5ce0c475de", "row_index": 359, "timestamp": "2018-04-17T19:26:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0fe06d3-02eb-473a-8ffc-ab5ce0c475de", "eventTime": "2018-04-17T19:26:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587eea6d-ede2-4ed6-90f9-3dabf83b28c9", "record_id": "flaws_cloudtrail:0000360:587eea6d-ede2-4ed6-90f9-3dabf83b28c9", "row_index": 360, "timestamp": "2018-04-17T19:26:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587eea6d-ede2-4ed6-90f9-3dabf83b28c9", "eventTime": "2018-04-17T19:26:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7073a9d6-c529-437d-b2d7-542735cdfb61", "record_id": "flaws_cloudtrail:0000361:7073a9d6-c529-437d-b2d7-542735cdfb61", "row_index": 361, "timestamp": "2018-04-17T19:26:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7073a9d6-c529-437d-b2d7-542735cdfb61", "eventTime": "2018-04-17T19:26:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: R-KpxbattAWB1QJNRblIuuuNOqyeQ1O0-vRP5UAHvF0_jjnQB2rDrXGimDXv6BnKmeGXjBLCo20P6KM2_5zRAb6tOYvgkFaZ3hs48nVB2u1Knbupz2T61gFb1l11I7hB36H_oNQCFBNCIdVuajA7ww5k63Nv25oRpDdUJupug7wcld3M1I9Z7AzN7WgIFvrCA6OSTrfRFQvqD-zOeRhZn_CtF6Fesb3AgyjKdAVB2Juf4SVtHRR_vq4lDvXJ99H1vwvqkbnrZDupcIcXzuj0jWKa4nBw8aoYuXggBSS9yLXma1aEqIaZryETOvwWbYyp01veJ4-WYpqWIukXsluGd5QxWAMprotLWHcSTZCWip3VMf0J4vL-vtVouQRWm3PyOyYLSgN6XbvV3RgYG4OqYk4261kKT16gAj7Fo-DtuvZ0xr8L46KiVxZ1ngdqSeZSUKVelgTBcrSoGX85W8Ys5yHxrlq5_5UjcsBPcGmFXyahjfNLh-Ej72HppMpBkjTIfRbmkM8jnkRcBh5EVgMQTqTEUdekYXX0yeugDHdl_3WCFbeveHrZ-s6BbINw77C3Olb_IJN_cLdB3vQ7WFvnolXB1zc9446mQWODvVT8TG6PGOZplaicMBAROfCHmjyaCIgQjAvDnj3LHY5CWAkE_LM_Tty5wvOROQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9e0989-ce9b-4de4-9845-bb1638e6c460", "record_id": "flaws_cloudtrail:0000362:ec9e0989-ce9b-4de4-9845-bb1638e6c460", "row_index": 362, "timestamp": "2018-04-17T19:27:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9e0989-ce9b-4de4-9845-bb1638e6c460", "eventTime": "2018-04-17T19:27:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e26183-1772-4b17-a821-d62dd97d1448", "record_id": "flaws_cloudtrail:0000363:e26183-1772-4b17-a821-d62dd97d1448", "row_index": 363, "timestamp": "2018-04-17T19:27:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e26183-1772-4b17-a821-d62dd97d1448", "eventTime": "2018-04-17T19:27:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e5cb363-599c-42c9-bb21-a27d8a5e707a", "record_id": "flaws_cloudtrail:0000364:8e5cb363-599c-42c9-bb21-a27d8a5e707a", "row_index": 364, "timestamp": "2018-04-17T19:27:00Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e5cb363-599c-42c9-bb21-a27d8a5e707a", "eventTime": "2018-04-17T19:27:00Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d9009c-3430-4951-9cfa-b90d5a8e6c6f", "record_id": "flaws_cloudtrail:0000365:f7d9009c-3430-4951-9cfa-b90d5a8e6c6f", "row_index": 365, "timestamp": "2018-04-17T19:27:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d9009c-3430-4951-9cfa-b90d5a8e6c6f", "eventTime": "2018-04-17T19:27:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedff6b1-861e-4836-9baf-b1d4eeaa863c", "record_id": "flaws_cloudtrail:0000366:fedff6b1-861e-4836-9baf-b1d4eeaa863c", "row_index": 366, "timestamp": "2018-04-17T19:27:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedff6b1-861e-4836-9baf-b1d4eeaa863c", "eventTime": "2018-04-17T19:27:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3311abee-41e6-4d19-8cdd-855def9d62a4", "record_id": "flaws_cloudtrail:0000367:3311abee-41e6-4d19-8cdd-855def9d62a4", "row_index": 367, "timestamp": "2018-04-17T19:27:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3311abee-41e6-4d19-8cdd-855def9d62a4", "eventTime": "2018-04-17T19:27:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716d7d2d-1ad5-449b-b4cf-4a8956ef5a77", "record_id": "flaws_cloudtrail:0000368:716d7d2d-1ad5-449b-b4cf-4a8956ef5a77", "row_index": 368, "timestamp": "2018-04-17T19:27:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716d7d2d-1ad5-449b-b4cf-4a8956ef5a77", "eventTime": "2018-04-17T19:27:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cecaacf0-2bad-4e14-9391-d6c00bc8f180", "record_id": "flaws_cloudtrail:0000369:cecaacf0-2bad-4e14-9391-d6c00bc8f180", "row_index": 369, "timestamp": "2018-04-17T19:27:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cecaacf0-2bad-4e14-9391-d6c00bc8f180", "eventTime": "2018-04-17T19:27:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3305fd54-2698-431d-9919-19d3fa20765a", "record_id": "flaws_cloudtrail:0000370:3305fd54-2698-431d-9919-19d3fa20765a", "row_index": 370, "timestamp": "2018-04-17T19:27:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3305fd54-2698-431d-9919-19d3fa20765a", "eventTime": "2018-04-17T19:27:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a43c7f3-b841-48a9-a576-5fa7477d2d85", "record_id": "flaws_cloudtrail:0000371:1a43c7f3-b841-48a9-a576-5fa7477d2d85", "row_index": 371, "timestamp": "2018-04-17T19:27:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a43c7f3-b841-48a9-a576-5fa7477d2d85", "eventTime": "2018-04-17T19:27:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff1ee63-e072-48ca-b578-392a448d9470", "record_id": "flaws_cloudtrail:0000372:cff1ee63-e072-48ca-b578-392a448d9470", "row_index": 372, "timestamp": "2018-04-17T19:27:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff1ee63-e072-48ca-b578-392a448d9470", "eventTime": "2018-04-17T19:27:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab791813-f521-4a15-82af-d2a25cb7682b", "record_id": "flaws_cloudtrail:0000373:eab791813-f521-4a15-82af-d2a25cb7682b", "row_index": 373, "timestamp": "2018-04-17T19:27:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab791813-f521-4a15-82af-d2a25cb7682b", "eventTime": "2018-04-17T19:27:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d355bdb1-7e01-47e3-9e59-354ae0ba0235", "record_id": "flaws_cloudtrail:0000374:d355bdb1-7e01-47e3-9e59-354ae0ba0235", "row_index": 374, "timestamp": "2018-04-17T19:27:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1829, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d355bdb1-7e01-47e3-9e59-354ae0ba0235", "eventTime": "2018-04-17T19:27:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cfczZ7J0guGISLaycLCWC9ZTIvjnCyvzk7lptuIXqdIbjk_ILhTbeJs1QCAAzEJwkPECyzgGTzBmCmg9K-DBM3vfS0EIY80UkZ5ZSUDBaSfzb3UkqV9bW2vYqefJYvNwI3-G90z9F9K7DNeQGcgaTlmFPCOAhpmRlO006DWAjXSTOZC96vb904oqNkwb-vSkUfxzSepoIq7QtEqakfSgn3svhGEvPTPYfRXyE9PoEsEczxzayCC3BbHsuaz-IUFO483Tsm2fJE7cBSYmB42GwXY2LEfOT6AO9tv63mQ4Q7dBnT1p0gMxIpJqH2XwB0IJMCvnZyhPcbZu-Jp4KXVYf2dPXjDwOtECw0rfsRommSH_Hn-gl9LxCEjG3_Ldezw3uWL89dqUEHwB3s-TVFAD7RY4AwNFf3P8GNBiMRCvLoivDeTOy7lAYUZhHUsosEcdFxbogII9-TOAvvpBV6RGcB2MekV7_QNK6XjVn5YjVAGNW22GR2rR70uyX-h4tuvtux_xkNMEaBNGiZlbZG6Er7A_IEuSSoVVNRGm2pZlEeYIsYv42o5_xSitbzYka2nWfPsEJIUgItHpcjbkxR_wp-gHc4BFQlnGKigpQVVdsalQgD_FG45xSTXH9iUaHczZUrvvay3EC7wJUmnnF8xa0v9FUDjTDqdrCBA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34adb72d-4a64-4c04-a261-0cd6e43dd944", "record_id": "flaws_cloudtrail:0000375:34adb72d-4a64-4c04-a261-0cd6e43dd944", "row_index": 375, "timestamp": "2018-04-17T19:27:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34adb72d-4a64-4c04-a261-0cd6e43dd944", "eventTime": "2018-04-17T19:27:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f270547-126c-423a-983f-fc78c08365d0", "record_id": "flaws_cloudtrail:0000376:f270547-126c-423a-983f-fc78c08365d0", "row_index": 376, "timestamp": "2018-04-17T19:27:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f270547-126c-423a-983f-fc78c08365d0", "eventTime": "2018-04-17T19:27:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1a96f2-afe0-48e1-9afd-a7bd9d4baa39", "record_id": "flaws_cloudtrail:0000377:2f1a96f2-afe0-48e1-9afd-a7bd9d4baa39", "row_index": 377, "timestamp": "2018-04-17T19:27:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1a96f2-afe0-48e1-9afd-a7bd9d4baa39", "eventTime": "2018-04-17T19:27:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56076ea-1287-409c-9a51-f77ce4263b56", "record_id": "flaws_cloudtrail:0000378:f56076ea-1287-409c-9a51-f77ce4263b56", "row_index": 378, "timestamp": "2018-04-17T19:27:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56076ea-1287-409c-9a51-f77ce4263b56", "eventTime": "2018-04-17T19:27:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720f9893-3f84-475c-a574-95e24875a", "record_id": "flaws_cloudtrail:0000379:720f9893-3f84-475c-a574-95e24875a", "row_index": 379, "timestamp": "2018-04-17T19:27:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1823, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720f9893-3f84-475c-a574-95e24875a", "eventTime": "2018-04-17T19:27:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: TpsTQyimWbAqHs9iRw4yOcuauHfxiRdUmkdSIpgrAjCgWsJ4KqRzAywQxGMw6uDfRu6PjL-rPuCn3U3nSr4MTk6YgQirNVlotBGnNAn0WtnpWHjlNkiqPd9OzLGuweeK2BGFCLEPbjvaSJv7fgip2BNb_wN1p1cj0KqSQtkXo9NgEPg6flWgVrNOsGf9pO2LDmyCZUqv1I63pdAxJDKeUN1HmClSlJBK0NM0bIZjzFvaNsF89cBdPSmzrJHYR1PHtVP2bSLg2EChzVhjHNhIrUPJfBoCn6kPWgo-kmIH7hTl1ZIQ5SHDlg9Z2UQtsRCk2-W5y4CJhxQJKS1TJ4NWKy6PwbqEna1Gf90iRwMe9MxbfQB2IEbBvMiJczBYK5_fsvWkISUgKADxC_lHqthYlLmX-O2PS0InefG4sdwmr20cSJkLLmzjSPBB4IybdsKvAZCkf-nDKAtW-sHkcADt22Ntz7-KdGgM_XGDHaELzdMN0yhaU84R1ag1RTeFijnqLinB9AAFeC58_TmsH0R8fQmzv74uH4M-hnF69OrJYykOJ8nqnPT7rfQAiDa1ICMv9xnp1S7drFUIjDqKsWAD51p2a8haOUkI-ZysvIZ7U3dM_vp0hoOiYRjhrc6a1Sl6gA33BXyfBDbkqkTZ8SncoUPOnqGNQzSr", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5b534d-5799-4aaf-8c5d-803be49787ba", "record_id": "flaws_cloudtrail:0000380:6a5b534d-5799-4aaf-8c5d-803be49787ba", "row_index": 380, "timestamp": "2018-04-17T19:27:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5b534d-5799-4aaf-8c5d-803be49787ba", "eventTime": "2018-04-17T19:27:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65b351c-103b-4218-82c9-c4d31205c6", "record_id": "flaws_cloudtrail:0000381:a65b351c-103b-4218-82c9-c4d31205c6", "row_index": 381, "timestamp": "2018-04-17T19:27:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65b351c-103b-4218-82c9-c4d31205c6", "eventTime": "2018-04-17T19:27:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c9dbce-85b8-42bb-a323-35cfa72afd67", "record_id": "flaws_cloudtrail:0000382:50c9dbce-85b8-42bb-a323-35cfa72afd67", "row_index": 382, "timestamp": "2018-04-17T19:27:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c9dbce-85b8-42bb-a323-35cfa72afd67", "eventTime": "2018-04-17T19:27:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: y2HqyGFwDr5shMZFwlETt5ScRa4uI1_fCUVNNH4M8FUXrIvi0lFuCPhWQN_1LTYYEwme0QEv_U9f9m2YydtCbP_oCgi01Ps7avWijk7oOyP2QPKMaU6hI992eqA1i-tHCYBFQgwYM-V_5MZhahS5tmuYiEE6fUvRh3f6nxzVtxoA_2YH6-opoOSiwDsQpjU2-J-snr0PZNmtmfDktrVPfTZCMuxdJaMwj3VcprsRJfSZU7qnsymNexxpYa8iLm65LbQJ0DDl4_Cd416UZ2lLIskmI_96ZiUb1ghOkeBwcxVCdHOM5S2q5d7EcS5JsphgZn9OKggUGGhs77-zQvI66hTt5gIx5b-1Pb74f0erR_R62sy2q415agrDk7BJA69mg8YMgmhYrodp2x1i6oOHUdJTLjloEGvM4GIcjQcF997g9d3FHKo0M3kmIYjpmG0F7ipUzwwSlBQTP-4C4esg1fibxlNxStZRPuI6Djcds2V5nQuabZ7cPHIeDErLzway68eAZ-c0mLjEOD3dlJ8XK2yjSGjiBM-ot0JpEZPFbDUd7PekO_usN6elwzn-ozfY43Dwmi3oZHZutVisc9dbu1wjCm8r4gmhXc8iOp0FQY1LrH8KgJf8tPuV_A9Y7fowg8Iq2T3prWyLr32k9QD5YAmjWj0xo_Rmrb3x", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dee9902b-fa1a-4d75-a679-e1cc68a0302e", "record_id": "flaws_cloudtrail:0000383:dee9902b-fa1a-4d75-a679-e1cc68a0302e", "row_index": 383, "timestamp": "2018-04-17T19:27:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dee9902b-fa1a-4d75-a679-e1cc68a0302e", "eventTime": "2018-04-17T19:27:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99843f57-1669-42c5-927d-b5ac51e0b48f", "record_id": "flaws_cloudtrail:0000384:99843f57-1669-42c5-927d-b5ac51e0b48f", "row_index": 384, "timestamp": "2018-04-17T19:27:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99843f57-1669-42c5-927d-b5ac51e0b48f", "eventTime": "2018-04-17T19:27:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a12e8918-f38c-4ca2-a7eb-c0327e992e84", "record_id": "flaws_cloudtrail:0000385:a12e8918-f38c-4ca2-a7eb-c0327e992e84", "row_index": 385, "timestamp": "2018-04-17T19:27:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a12e8918-f38c-4ca2-a7eb-c0327e992e84", "eventTime": "2018-04-17T19:27:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: se691Vf2OyUrpcgCH3GdTnd6cIAY_JnKIBEtDzdfgTDpym75maUXQEQ3MygKsGoaL8PyNWrlZ7pJdqE9x2hD1qjkSSMypz1LldtyxOkloqjpEgPnSIsvO_xLIXRI_tM5r_FYgXLXtZBDn3Tux3vKry_IUyJYI4fp2dVMM-kpyQxW8EpS6j5X5HUAsArBroZdnkrqg8YmLcNSU7RYVlEAigcUyeX5-jbbWFnPVnxqE0E4_jvWG3gm5Bbrpwd38Oqf8eeLJFeZJFYqD1867Lzb7-NydC9ceZZhzRU8fO_cK7kT9x8_gs2W5sMFhkEelHT3jt0InGfFYpLDJ19ahwFVeXPTsO7hLNjhgmK9go2WXAmR-DGcDp_WcpMuHJGQrdXcY_t0JnHA-qg8cwoy6xvR8PEhbIYwWqEgcPO3nXBiXrgacfiWkzxSW5S8ifhBy09__Gvo5olv05dfIPIfFbt2oI3LM-uIflYUxl-QuNJZD6fpu-t9coo8pk38MecfOMZwgF1f4hFC7_wzfS3bHL37TuIRh3NcVn4571CpTWNbASFsAWjHd84lkl7gOplm9oG8YVH2cZ5jAlXGIWVyl3lyUSUTeakhbSNU3Y8gQrYKhGHkitlNBXeGd9zViYSKllgZpHQ13df8J0ij5wDrjNZEEgISM0QoqHfeSQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a75db37b-8956-4768-ac4e-e4f7a8f9d135", "record_id": "flaws_cloudtrail:0000386:a75db37b-8956-4768-ac4e-e4f7a8f9d135", "row_index": 386, "timestamp": "2018-04-17T19:27:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a75db37b-8956-4768-ac4e-e4f7a8f9d135", "eventTime": "2018-04-17T19:27:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515d8155-512d-4718-a223-6dd98936ddba", "record_id": "flaws_cloudtrail:0000387:515d8155-512d-4718-a223-6dd98936ddba", "row_index": 387, "timestamp": "2018-04-17T19:27:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515d8155-512d-4718-a223-6dd98936ddba", "eventTime": "2018-04-17T19:27:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59391aba-945a-4746-ac85-765adc7805ec", "record_id": "flaws_cloudtrail:0000388:59391aba-945a-4746-ac85-765adc7805ec", "row_index": 388, "timestamp": "2018-04-17T19:27:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59391aba-945a-4746-ac85-765adc7805ec", "eventTime": "2018-04-17T19:27:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a642fc30-5ea0-4ac1-8b4a-f8f78317f5f0", "record_id": "flaws_cloudtrail:0000389:a642fc30-5ea0-4ac1-8b4a-f8f78317f5f0", "row_index": 389, "timestamp": "2018-04-17T19:27:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a642fc30-5ea0-4ac1-8b4a-f8f78317f5f0", "eventTime": "2018-04-17T19:27:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: V-0hjNd5uH69sB_TXyH6E7gcx20m70cl38VvnGCk3BTSXvfz340-X5u9dy74WcnfDWwDYRlHFp6cQ2Vu0PwS-plRb9Ogztq2wWGYQ_I4LKyagj7nao6G-0KVTPjMG3wy9dQTAW_bD9EW_zO8efBOxaikPs3ibh6SvUr6-Rkcdy-C5nVK9nG5CQ-JmuFS3obw2rKoTs1khuSb3V7kPXybSgGbiIWaOTDAj3t1XgB92TI-AorRuKAibqjOTXQul9zczMyxTb4-gTPp-c_-WH5GsgWMXk2IZPGdZ0DGC1CfFh2D61NlkKPv-sGg38LcVjLvpK3atirzwx8cAIqi0pvtkEJRBWr2sFb7J4gBqVIQMhpEfzWTWH90xGO6ftrY5foBLJO5xheFM9gh0d021oQ_nRaGrcrX5_YUr21fLPuTf_x3WOrkU2sCt1RF4HYx3h3fE0tu24YJrnPbSWhwhEx9qklkU5wcWMfzPxD81v8n43yTxFSvE_8fvCzfkgpYvOsMqMIyqx1FCbX9hRv2BiOULUtFpj5IcRQSxCJOnmZnw_BWrL759Tp5e7G_o2ZLyZYgS39i8Rn9YZsuTkbfLDgqwMJj2a16sxuprGF630B-ofZnRepP6rXUoqJyOIiETD_OomRNXIohyZa4z4CdJirf2O4mPdLSWz5f594", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b4cc073-d3f9-4916-931a-fdd7fe8922fd", "record_id": "flaws_cloudtrail:0000390:6b4cc073-d3f9-4916-931a-fdd7fe8922fd", "row_index": 390, "timestamp": "2018-04-17T19:32:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b4cc073-d3f9-4916-931a-fdd7fe8922fd", "eventTime": "2018-04-17T19:32:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "509b9f14-d7ee-40a3-a1e7-d39c1f139740", "record_id": "flaws_cloudtrail:0000391:509b9f14-d7ee-40a3-a1e7-d39c1f139740", "row_index": 391, "timestamp": "2018-04-17T19:33:33Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 561, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "509b9f14-d7ee-40a3-a1e7-d39c1f139740", "eventTime": "2018-04-17T19:33:33Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb6370f-cc2e-4c6a-9dea-f1abe0bef012", "record_id": "flaws_cloudtrail:0000392:dfb6370f-cc2e-4c6a-9dea-f1abe0bef012", "row_index": 392, "timestamp": "2018-04-17T19:35:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 581, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb6370f-cc2e-4c6a-9dea-f1abe0bef012", "eventTime": "2018-04-17T19:35:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a7d17c-e433-44bf-aef9-f37e15b15ffa", "record_id": "flaws_cloudtrail:0000393:e9a7d17c-e433-44bf-aef9-f37e15b15ffa", "row_index": 393, "timestamp": "2018-04-17T19:37:15Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 564, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a7d17c-e433-44bf-aef9-f37e15b15ffa", "eventTime": "2018-04-17T19:37:15Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308671f2b-03b2-4a4f-b0ee-39561e2afba8", "record_id": "flaws_cloudtrail:0000394:308671f2b-03b2-4a4f-b0ee-39561e2afba8", "row_index": 394, "timestamp": "2018-04-17T19:38:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308671f2b-03b2-4a4f-b0ee-39561e2afba8", "eventTime": "2018-04-17T19:38:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47db4326-3158-4707-a346-bb4372bd7239", "record_id": "flaws_cloudtrail:0000395:47db4326-3158-4707-a346-bb4372bd7239", "row_index": 395, "timestamp": "2018-04-17T19:38:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47db4326-3158-4707-a346-bb4372bd7239", "eventTime": "2018-04-17T19:38:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867e6e9b-f43d-4d9a-95fa-699f20e5b340", "record_id": "flaws_cloudtrail:0000396:867e6e9b-f43d-4d9a-95fa-699f20e5b340", "row_index": 396, "timestamp": "2018-04-17T19:38:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867e6e9b-f43d-4d9a-95fa-699f20e5b340", "eventTime": "2018-04-17T19:38:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11adcab8-af9d-4500-95d0-5f59997ffa6", "record_id": "flaws_cloudtrail:0000397:11adcab8-af9d-4500-95d0-5f59997ffa6", "row_index": 397, "timestamp": "2018-04-17T19:38:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11adcab8-af9d-4500-95d0-5f59997ffa6", "eventTime": "2018-04-17T19:38:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08bbccd1-149a-4d26-b731-48cc3ea877022", "record_id": "flaws_cloudtrail:0000398:08bbccd1-149a-4d26-b731-48cc3ea877022", "row_index": 398, "timestamp": "2018-04-17T19:38:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08bbccd1-149a-4d26-b731-48cc3ea877022", "eventTime": "2018-04-17T19:38:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29833a5-9211-4a3f-809b-7ba2c0f36b12", "record_id": "flaws_cloudtrail:0000399:29833a5-9211-4a3f-809b-7ba2c0f36b12", "row_index": 399, "timestamp": "2018-04-17T19:38:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29833a5-9211-4a3f-809b-7ba2c0f36b12", "eventTime": "2018-04-17T19:38:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86fb626a-dfc7-48d0-968a-09f7b6da38f1", "record_id": "flaws_cloudtrail:0000400:86fb626a-dfc7-48d0-968a-09f7b6da38f1", "row_index": 400, "timestamp": "2018-04-17T19:38:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86fb626a-dfc7-48d0-968a-09f7b6da38f1", "eventTime": "2018-04-17T19:38:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c7324a-c54f-47f7-ba46-4e18e6a9b731", "record_id": "flaws_cloudtrail:0000401:b9c7324a-c54f-47f7-ba46-4e18e6a9b731", "row_index": 401, "timestamp": "2018-04-17T19:38:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c7324a-c54f-47f7-ba46-4e18e6a9b731", "eventTime": "2018-04-17T19:38:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e501f081-bf9a-4257-87ab-49b24a5493c4", "record_id": "flaws_cloudtrail:0000402:e501f081-bf9a-4257-87ab-49b24a5493c4", "row_index": 402, "timestamp": "2018-04-17T19:38:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e501f081-bf9a-4257-87ab-49b24a5493c4", "eventTime": "2018-04-17T19:38:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04afff9e-db11-435e-9c85-e66e942812b5", "record_id": "flaws_cloudtrail:0000403:04afff9e-db11-435e-9c85-e66e942812b5", "row_index": 403, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04afff9e-db11-435e-9c85-e66e942812b5", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c4f830-a9fa-4139-89fe-ea65787cf1bd", "record_id": "flaws_cloudtrail:0000404:d2c4f830-a9fa-4139-89fe-ea65787cf1bd", "row_index": 404, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c4f830-a9fa-4139-89fe-ea65787cf1bd", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bed5207-8d93-418c-8f72-0fdc76a30fce", "record_id": "flaws_cloudtrail:0000405:1bed5207-8d93-418c-8f72-0fdc76a30fce", "row_index": 405, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bed5207-8d93-418c-8f72-0fdc76a30fce", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c18a5cf5-2e48-4051-94e7-c9ab562fb458", "record_id": "flaws_cloudtrail:0000406:c18a5cf5-2e48-4051-94e7-c9ab562fb458", "row_index": 406, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c18a5cf5-2e48-4051-94e7-c9ab562fb458", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f71d3cc-038f-40cc-a56f-aa776a0f67ab", "record_id": "flaws_cloudtrail:0000407:8f71d3cc-038f-40cc-a56f-aa776a0f67ab", "row_index": 407, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f71d3cc-038f-40cc-a56f-aa776a0f67ab", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbaa1358-5043-40b3-99ff-b475a675c9be", "record_id": "flaws_cloudtrail:0000408:cbaa1358-5043-40b3-99ff-b475a675c9be", "row_index": 408, "timestamp": "2018-04-17T19:38:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbaa1358-5043-40b3-99ff-b475a675c9be", "eventTime": "2018-04-17T19:38:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd95500-51fd-4a10-8361-ee2fd9b797de", "record_id": "flaws_cloudtrail:0000409:5bd95500-51fd-4a10-8361-ee2fd9b797de", "row_index": 409, "timestamp": "2018-04-17T19:38:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd95500-51fd-4a10-8361-ee2fd9b797de", "eventTime": "2018-04-17T19:38:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50398bb4-db12-4384-b0c1-4e50b553a9a1", "record_id": "flaws_cloudtrail:0000410:50398bb4-db12-4384-b0c1-4e50b553a9a1", "row_index": 410, "timestamp": "2018-04-17T19:38:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50398bb4-db12-4384-b0c1-4e50b553a9a1", "eventTime": "2018-04-17T19:38:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe4b7dfa-038f-46fa-b828-16784dd0ff", "record_id": "flaws_cloudtrail:0000411:fe4b7dfa-038f-46fa-b828-16784dd0ff", "row_index": 411, "timestamp": "2018-04-17T19:38:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe4b7dfa-038f-46fa-b828-16784dd0ff", "eventTime": "2018-04-17T19:38:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1830a249-b201-4f27-8bd6-0ca8e265b7de", "record_id": "flaws_cloudtrail:0000412:1830a249-b201-4f27-8bd6-0ca8e265b7de", "row_index": 412, "timestamp": "2018-04-17T19:38:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1830a249-b201-4f27-8bd6-0ca8e265b7de", "eventTime": "2018-04-17T19:38:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e369b681-3e96-40a7-98cf-f41d90c84984", "record_id": "flaws_cloudtrail:0000413:e369b681-3e96-40a7-98cf-f41d90c84984", "row_index": 413, "timestamp": "2018-04-17T19:38:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e369b681-3e96-40a7-98cf-f41d90c84984", "eventTime": "2018-04-17T19:38:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6bf5454-43a7-489f-882c-67ea9d033adc", "record_id": "flaws_cloudtrail:0000414:b6bf5454-43a7-489f-882c-67ea9d033adc", "row_index": 414, "timestamp": "2018-04-17T19:38:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6bf5454-43a7-489f-882c-67ea9d033adc", "eventTime": "2018-04-17T19:38:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fddbb550-4f6f-4ec5-89ee-92db7f6c7dd0", "record_id": "flaws_cloudtrail:0000415:fddbb550-4f6f-4ec5-89ee-92db7f6c7dd0", "row_index": 415, "timestamp": "2018-04-17T19:38:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fddbb550-4f6f-4ec5-89ee-92db7f6c7dd0", "eventTime": "2018-04-17T19:38:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a959430f-896f-48e1-a68e-62daf775e8a8", "record_id": "flaws_cloudtrail:0000416:1a959430f-896f-48e1-a68e-62daf775e8a8", "row_index": 416, "timestamp": "2018-04-17T19:38:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a959430f-896f-48e1-a68e-62daf775e8a8", "eventTime": "2018-04-17T19:38:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01348abe-7243-4c68-bc43-397f93df3d60", "record_id": "flaws_cloudtrail:0000417:01348abe-7243-4c68-bc43-397f93df3d60", "row_index": 417, "timestamp": "2018-04-17T19:38:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01348abe-7243-4c68-bc43-397f93df3d60", "eventTime": "2018-04-17T19:38:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd673ab-b305-4252-87d9-a720841bd66ee", "record_id": "flaws_cloudtrail:0000418:5bd673ab-b305-4252-87d9-a720841bd66ee", "row_index": 418, "timestamp": "2018-04-17T19:38:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd673ab-b305-4252-87d9-a720841bd66ee", "eventTime": "2018-04-17T19:38:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf22a2b0-bec3-4805-9398-a3c47e1cd071", "record_id": "flaws_cloudtrail:0000419:cf22a2b0-bec3-4805-9398-a3c47e1cd071", "row_index": 419, "timestamp": "2018-04-17T19:38:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf22a2b0-bec3-4805-9398-a3c47e1cd071", "eventTime": "2018-04-17T19:38:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb5475f-52b2-49ce-9384-1f5a7ff84a69", "record_id": "flaws_cloudtrail:0000420:ceb5475f-52b2-49ce-9384-1f5a7ff84a69", "row_index": 420, "timestamp": "2018-04-17T19:38:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb5475f-52b2-49ce-9384-1f5a7ff84a69", "eventTime": "2018-04-17T19:38:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CVzRzdf-Dnq5gF9poCoDxvdm2FeN0TY4oXss1C860oKusEuKfoH5o-B0daoMQTZvf8eS7ylvCPKOLsFIvvD-zJOJQQyANg460eop9uiewGc-kI7sViHA_fqxDjcK4x1KZCRB6DzAMV4pv5OzUpydEcQbfmx-6NVruBdb1qdOHXa8vMgaZr-pUHg2PZTmXw8i2H06CSsUpbEkHEWxvH6K7DTeBiAWds57KPy7UZrZmaWJV0JJt-Fr38ZXMHhyyUqm97JPgTv-87U7F2BTFWTXQY4XfTSVBJVuWRM8zIqcMJcIzVEXIZvMvuxjEgo2aN_eSwRbhQGc_OpF-AWLDzR-ZQArtxPXHAgsIPy-rmqOvfHJGfrAdxPCfAnEswEyyTNosIvaSdzfB1k3xNPFIoxCPLfdfggZfCNJH1Jzf-LQcHMaEivOhAYXsNLwntNb4xjBMNv360TLb1sZnFtEJwhlz0mw5L_wp_Z9dxK776UNjM2uz68Wta4dLC6Lowd3lGflazlJUmEg7rrm3Y1nkIk7oNYHUERM-JkmFLUakDRr4LWqBeZaORq4zxzMTBVZWWMOEs4A52GVkc7ilhAzIzC1t7TwfRCWThKsoj7Z-h0xSAG2DWW6Q84yk2PbMn72LGmU8VgjcGV5cQcgyQ8ywaz6G7hPOrgdHujRMj-_p6GN", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22ab015-f23b-4408-a589-17b3c68a01a5", "record_id": "flaws_cloudtrail:0000421:e22ab015-f23b-4408-a589-17b3c68a01a5", "row_index": 421, "timestamp": "2018-04-17T19:38:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22ab015-f23b-4408-a589-17b3c68a01a5", "eventTime": "2018-04-17T19:38:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4444ca4-cc8b-4346-ae00-34b29dc604ed", "record_id": "flaws_cloudtrail:0000422:e4444ca4-cc8b-4346-ae00-34b29dc604ed", "row_index": 422, "timestamp": "2018-04-17T19:38:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4444ca4-cc8b-4346-ae00-34b29dc604ed", "eventTime": "2018-04-17T19:38:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c28739-532f-4878-b394-981f0d897812", "record_id": "flaws_cloudtrail:0000423:c28739-532f-4878-b394-981f0d897812", "row_index": 423, "timestamp": "2018-04-17T19:38:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c28739-532f-4878-b394-981f0d897812", "eventTime": "2018-04-17T19:38:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ffda79-230c-4b0a-b56c-aadeb7055efc", "record_id": "flaws_cloudtrail:0000424:62ffda79-230c-4b0a-b56c-aadeb7055efc", "row_index": 424, "timestamp": "2018-04-17T19:38:23Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ffda79-230c-4b0a-b56c-aadeb7055efc", "eventTime": "2018-04-17T19:38:23Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c3c55a3-8d0b-4815-a07b-a378d9b1eaef", "record_id": "flaws_cloudtrail:0000425:5c3c55a3-8d0b-4815-a07b-a378d9b1eaef", "row_index": 425, "timestamp": "2018-04-17T19:38:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c3c55a3-8d0b-4815-a07b-a378d9b1eaef", "eventTime": "2018-04-17T19:38:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3a72f3-70a3-433d-a3b0-5c1486a033d0", "record_id": "flaws_cloudtrail:0000426:cb3a72f3-70a3-433d-a3b0-5c1486a033d0", "row_index": 426, "timestamp": "2018-04-17T19:38:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3a72f3-70a3-433d-a3b0-5c1486a033d0", "eventTime": "2018-04-17T19:38:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0d86b2-4e8a-4e00-80df-f89929cdbb23", "record_id": "flaws_cloudtrail:0000427:3b0d86b2-4e8a-4e00-80df-f89929cdbb23", "row_index": 427, "timestamp": "2018-04-17T19:38:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0d86b2-4e8a-4e00-80df-f89929cdbb23", "eventTime": "2018-04-17T19:38:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d571eb19-8fee-49ed-9d47-0ea9a59cbed8", "record_id": "flaws_cloudtrail:0000428:d571eb19-8fee-49ed-9d47-0ea9a59cbed8", "row_index": 428, "timestamp": "2018-04-17T19:38:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d571eb19-8fee-49ed-9d47-0ea9a59cbed8", "eventTime": "2018-04-17T19:38:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LEBFqlmcxQHEWz3CFQdt8Z3ZOKFOZhMRmIjGI_HZk6lfHYDGOd3pVX3aMHzqb7341RaE8lyoIWwi5UxMJQorcgitux7etyhYtn7U4Wy5OzjMdm3x8dF2rdJ1CBagfdMj62qe71cGRkB4HJ05mwwSm0vMjeQO_BUh0SVQG5KN5apRpEgD9CYBPq78zAEjkz716aMJOjdoq8LW9Z2u9dO6Y7BTIfpxm4IYgXK0nLUpA7uCAG8MgNWRktF9-55-5Vy_cuQEEepSMbAgn4b0cK-7LFRb2Q6311_ibyiZu67Q8dNIfX0k-VRDT1zL55ll4tQRY3dW6OGrkdTrZpz7U2neLY09--kMlKEGGwSHw2s5ahaBGhasuFNZy_XN_hJOfrd9H9qsswwaRmWRtSrD_exeCaRXGHeg56lp7B0j0rRcCXQDwqP7GFmewLehVUcg17BxEyfasDRt0rvA4b-QXiuiMxjC-AN_zKCgE2CFEwL5J69xysdBJvMeZ_Jk0W7j6zmege8QBPnhcSGIaDhMHtMm7RXQESuZU-PaIJCPf3_yBwEGioDVhrvQoXZ53Dkh5KYpjQ1nbXdqYezxvVWqq3XyARi442wtHmY1vEtqWg0_xKGEItEjS1pAewO4eiVBl9ndkXqrlb9uYIeZUf6T40bnI7Wonpd_3tJ9RBjJY_GK", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "475f5929-8f0b-44bc-87c4-c94c3e7bf421", "record_id": "flaws_cloudtrail:0000429:475f5929-8f0b-44bc-87c4-c94c3e7bf421", "row_index": 429, "timestamp": "2018-04-17T19:38:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "475f5929-8f0b-44bc-87c4-c94c3e7bf421", "eventTime": "2018-04-17T19:38:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f60bbc80-2435-42a4-a481-71e75618f97a", "record_id": "flaws_cloudtrail:0000430:f60bbc80-2435-42a4-a481-71e75618f97a", "row_index": 430, "timestamp": "2018-04-17T19:38:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f60bbc80-2435-42a4-a481-71e75618f97a", "eventTime": "2018-04-17T19:38:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2AvqVpgLAshemrbsT6IAxxchhsRRbHwYIz6A2MEsfaZHTfaAfztoMIm0Ccn7vTVNJ9_6lNUPpU9lpY_FeHncTIILAN7nfp4oqj5vVbRZsBrlgq87hJyxitXK2Umb3tIn26VHrtnBXFIdf2UIMeztIDckd-lKW6y9_UwYvXXLWAMbqI53RHZSvRuWhiJNbkJRNUXszILhLnQxkhmUGuZj-U1xivA0zHJb-J3flD-OEA0oBPTGLlxFy9QCeDcaRNZEfKqqEJdb8dFZHk5wXqUaKlZgQuSioeevZtGpaRplp4QnfRq3qhOCWx7ar-BsgwKxTwmXV79cCvLkhlnr93gCeYfHdmoc4DLkTk3cW1GuCDJbGhkQunRaK257RqUyZ-dLrdUlN-5fXFnry9yNFzTxpES3EgCtsfRJTSV-bfKijEZUvZzt8Znlu8Xa1l5H8Egg1zOsp7rw6cb0mxxG31XEm_dfoBwQfQfhHqxdbDJoLogTqusK-L18ZvJIU0bfKeGzhB3WVKrLHs6QwSWws5EcmQrmVD7njlaAViSZ0AqzalEg38V9tQHXYGF_7h9ycPDZjIkD7X3QSnEMd6Fz3B3gmTKImJWwJTKgs7W1DG052FSJ20-SapLcw0N6Wcth03to8XzutvVRsFLorUJAfb_aKsy7XzEmXrPqNq4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a07ccd-4097-4d8b-ad06-159a2e40b3f3", "record_id": "flaws_cloudtrail:0000431:62a07ccd-4097-4d8b-ad06-159a2e40b3f3", "row_index": 431, "timestamp": "2018-04-17T19:38:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a07ccd-4097-4d8b-ad06-159a2e40b3f3", "eventTime": "2018-04-17T19:38:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efdb5c8e-902c-4165-85ce-e76e76f75f18", "record_id": "flaws_cloudtrail:0000432:efdb5c8e-902c-4165-85ce-e76e76f75f18", "row_index": 432, "timestamp": "2018-04-17T19:38:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efdb5c8e-902c-4165-85ce-e76e76f75f18", "eventTime": "2018-04-17T19:38:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50865d9e-041d-4449-9f3a-1233b052d87c", "record_id": "flaws_cloudtrail:0000433:50865d9e-041d-4449-9f3a-1233b052d87c", "row_index": 433, "timestamp": "2018-04-17T19:38:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50865d9e-041d-4449-9f3a-1233b052d87c", "eventTime": "2018-04-17T19:38:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5a2c2b0-c048-49d2-bb19-3cad29278db0", "record_id": "flaws_cloudtrail:0000434:b5a2c2b0-c048-49d2-bb19-3cad29278db0", "row_index": 434, "timestamp": "2018-04-17T19:38:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5a2c2b0-c048-49d2-bb19-3cad29278db0", "eventTime": "2018-04-17T19:38:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3595bd5d-1d8d-4edb-a3da-9391011af4a6", "record_id": "flaws_cloudtrail:0000435:3595bd5d-1d8d-4edb-a3da-9391011af4a6", "row_index": 435, "timestamp": "2018-04-17T19:38:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3595bd5d-1d8d-4edb-a3da-9391011af4a6", "eventTime": "2018-04-17T19:38:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86bdeaf3-6725-4db0-ba2a-8dd2d9cbd16d", "record_id": "flaws_cloudtrail:0000436:86bdeaf3-6725-4db0-ba2a-8dd2d9cbd16d", "row_index": 436, "timestamp": "2018-04-17T19:38:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86bdeaf3-6725-4db0-ba2a-8dd2d9cbd16d", "eventTime": "2018-04-17T19:38:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb204331f-da7f-4a1a-a286-c4a51088f", "record_id": "flaws_cloudtrail:0000437:eb204331f-da7f-4a1a-a286-c4a51088f", "row_index": 437, "timestamp": "2018-04-17T19:38:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1823, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb204331f-da7f-4a1a-a286-c4a51088f", "eventTime": "2018-04-17T19:38:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: F3T7jPf2S7AGxqihH3WNJLFSNiWgw4DRIuIM7VgfSLpiia4KuIzVVGMoIwWylO3yn2u-wR4H1JUzEsECXaW1RK-VOXXFGjWBYeqpFIJM27I_byJiQjv17fa_nmruX3hXgdjw5ocVnT1zUrZ9FingIOvRT5F41ezOyzMzHA0zX-ZYlhvPvyhqm9tIynlzgiw_HDY84mrt_EKKnYylxCRFaqaAgG_dlFvMvI4Qlus-TtBH0ajDGLfDSQFflVM2MhJwURQwIu1grT8zFiwB5EOmO4m8EXUdhfUQcs7jgMYxz6bYSOPPYdm3x57s8jVkry1OWbZlO8GehUwP7kpVgol_6uxP-xqsa-eprEoonQLrTkU4bWmh3dWxFXugibvZvIivRGzS4Jv2zkCtzj6sLx3mS0PsP0qK1fg3cd_BbSWesbO5l6FGQh0lEG3NV2kexaeIjuLXHIXG7rZf6EFThlNNDny0ZHUZM4lzMI4yXntGBr4IHa8wgRKh-qr6GNz9Ksiwq9GVQ_RBCACvVg2aSUes8ODGmKOLSRF_73UXN7WkYs1j_nhNEpv67KeNBoWhSOi77nlOkwcp-XL2INPBcxXH7V25U-ytXkuCkATU5khWJXHhQRZbU59JZMSPGmFT3eUpWTmzSGU0AI7sP07XirHX_wtcqlWyCIAC", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366828fe9-9bff-4e3d-90cf-1645de1b7f05", "record_id": "flaws_cloudtrail:0000438:366828fe9-9bff-4e3d-90cf-1645de1b7f05", "row_index": 438, "timestamp": "2018-04-17T19:38:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366828fe9-9bff-4e3d-90cf-1645de1b7f05", "eventTime": "2018-04-17T19:38:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063b9af4-4cb8-4afd-9a43-5a2b4e705e34", "record_id": "flaws_cloudtrail:0000439:063b9af4-4cb8-4afd-9a43-5a2b4e705e34", "row_index": 439, "timestamp": "2018-04-17T19:38:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063b9af4-4cb8-4afd-9a43-5a2b4e705e34", "eventTime": "2018-04-17T19:38:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df463a2-821b-47d6-ab44-10465e0b08", "record_id": "flaws_cloudtrail:0000440:2df463a2-821b-47d6-ab44-10465e0b08", "row_index": 440, "timestamp": "2018-04-17T19:38:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df463a2-821b-47d6-ab44-10465e0b08", "eventTime": "2018-04-17T19:38:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9525a9ff-c5f7-4074-b6b1-41afa06408", "record_id": "flaws_cloudtrail:0000441:9525a9ff-c5f7-4074-b6b1-41afa06408", "row_index": 441, "timestamp": "2018-04-17T19:38:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9525a9ff-c5f7-4074-b6b1-41afa06408", "eventTime": "2018-04-17T19:38:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb16de6-4796-4d21-8254-19566b72b25c", "record_id": "flaws_cloudtrail:0000442:4cb16de6-4796-4d21-8254-19566b72b25c", "row_index": 442, "timestamp": "2018-04-17T19:38:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb16de6-4796-4d21-8254-19566b72b25c", "eventTime": "2018-04-17T19:38:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97509-2f09-4369-9697-a2acb0d16ca6", "record_id": "flaws_cloudtrail:0000443:97509-2f09-4369-9697-a2acb0d16ca6", "row_index": 443, "timestamp": "2018-04-17T19:38:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97509-2f09-4369-9697-a2acb0d16ca6", "eventTime": "2018-04-17T19:38:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fe23f99-0df3-4e49-9114-f4cd8cb207dc", "record_id": "flaws_cloudtrail:0000444:6fe23f99-0df3-4e49-9114-f4cd8cb207dc", "row_index": 444, "timestamp": "2018-04-17T19:38:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fe23f99-0df3-4e49-9114-f4cd8cb207dc", "eventTime": "2018-04-17T19:38:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9d2834a-51e0-417f-8288-6a1d63548", "record_id": "flaws_cloudtrail:0000445:e9d2834a-51e0-417f-8288-6a1d63548", "row_index": 445, "timestamp": "2018-04-17T19:38:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9d2834a-51e0-417f-8288-6a1d63548", "eventTime": "2018-04-17T19:38:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10767d-c3de-49f6-9c83-2d25a9a4c127", "record_id": "flaws_cloudtrail:0000446:10767d-c3de-49f6-9c83-2d25a9a4c127", "row_index": 446, "timestamp": "2018-04-17T19:38:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10767d-c3de-49f6-9c83-2d25a9a4c127", "eventTime": "2018-04-17T19:38:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "143c3dd5-902c-4680-8e14-fe61794e2c", "record_id": "flaws_cloudtrail:0000447:143c3dd5-902c-4680-8e14-fe61794e2c", "row_index": 447, "timestamp": "2018-04-17T19:38:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "143c3dd5-902c-4680-8e14-fe61794e2c", "eventTime": "2018-04-17T19:38:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: DM4oLmXuj6iviBhIhk5ONA2LhSdQ4o2PkERpiZWY-qrj9AK4BAYoIlhXI3944qRPi0cpUrK9l9pCVujvSWXMqRRkfmgPKcc0PL4rxhkHaQfyNRbnrY337vcpowdplfE2e-vW0cdEF4gwysDITEd-1XiWoadx5JGt-tqnWmofxZEh1sNbvgBCEs5IOzWKgXzwkD_Ubcoe-RBfaR0hthV0andNiVuQJR8U0L3aM0JTzxKZ1nllSqu1ySrC9mT786t3p71vSG_zNBY028Q-jmV6eTYfEgT8kKKkog3AKdo6_ExhLGp9LmDVguUriWpXnB9Yr8cP3wezSFOTwMro895QIn74pTcw9vFJdyf5G4rQXHS1A_Xl_s7fo2gnE7bywRPXZ460hzcBFcEAiAbG3MqrWH4wwRN_c_tVxhDV56CZUcdmEbpnRpOb4rkf-8ko7JJL2XTdtO9THxsVCTUhlNwgsQdaQtIisqiqifNJQzU4-lRSQnlvDtkGhv3rMyJCQXfLklWnAfCaRRNYdJ3pYCLr22po9P8AAmj-A3rtMXCNqvXPLV0Ak4YkydCXBTMvH7Omyfn38uLL-siHm3llp2-RUMs8Bp-KAg3Iso1OovM-6fWyeAGRS_nOHB0zPfRYsRG71IhKmi2NhgVab4YOJRHsM5HqRCtdUpRKrg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5ebee64-a723-4a60-8e56-7cffca6812c8", "record_id": "flaws_cloudtrail:0000448:d5ebee64-a723-4a60-8e56-7cffca6812c8", "row_index": 448, "timestamp": "2018-04-17T19:38:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5ebee64-a723-4a60-8e56-7cffca6812c8", "eventTime": "2018-04-17T19:38:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c60993a-a4f7-4fb1-b7b9-31229c0e58f7", "record_id": "flaws_cloudtrail:0000449:0c60993a-a4f7-4fb1-b7b9-31229c0e58f7", "row_index": 449, "timestamp": "2018-04-17T19:38:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c60993a-a4f7-4fb1-b7b9-31229c0e58f7", "eventTime": "2018-04-17T19:38:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d1a53fc-d14a-4594-a3f2-d36073c5", "record_id": "flaws_cloudtrail:0000450:1d1a53fc-d14a-4594-a3f2-d36073c5", "row_index": 450, "timestamp": "2018-04-17T19:38:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d1a53fc-d14a-4594-a3f2-d36073c5", "eventTime": "2018-04-17T19:38:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f37fac2-f3df-4f5c-be70-f23fee576054a", "record_id": "flaws_cloudtrail:0000451:2f37fac2-f3df-4f5c-be70-f23fee576054a", "row_index": 451, "timestamp": "2018-04-17T19:38:31Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f37fac2-f3df-4f5c-be70-f23fee576054a", "eventTime": "2018-04-17T19:38:31Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee10875-09a8-4544-89e9-1a9280c14f9d", "record_id": "flaws_cloudtrail:0000452:ee10875-09a8-4544-89e9-1a9280c14f9d", "row_index": 452, "timestamp": "2018-04-17T19:38:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee10875-09a8-4544-89e9-1a9280c14f9d", "eventTime": "2018-04-17T19:38:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1b4f857-28a4-4fbe-9f2d-ded99f6d9f7a", "record_id": "flaws_cloudtrail:0000453:a1b4f857-28a4-4fbe-9f2d-ded99f6d9f7a", "row_index": 453, "timestamp": "2018-04-17T19:38:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1b4f857-28a4-4fbe-9f2d-ded99f6d9f7a", "eventTime": "2018-04-17T19:38:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7a90ad3-b725-413d-857a-43e2c9006cea", "record_id": "flaws_cloudtrail:0000454:a7a90ad3-b725-413d-857a-43e2c9006cea", "row_index": 454, "timestamp": "2018-04-17T19:38:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7a90ad3-b725-413d-857a-43e2c9006cea", "eventTime": "2018-04-17T19:38:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98de5fe3-8e3a-47bd-a221-d6ee6734ea54", "record_id": "flaws_cloudtrail:0000455:98de5fe3-8e3a-47bd-a221-d6ee6734ea54", "row_index": 455, "timestamp": "2018-04-17T19:38:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98de5fe3-8e3a-47bd-a221-d6ee6734ea54", "eventTime": "2018-04-17T19:38:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bdd06b1-4506-49ce-98ba-d17edfa74f7d", "record_id": "flaws_cloudtrail:0000456:5bdd06b1-4506-49ce-98ba-d17edfa74f7d", "row_index": 456, "timestamp": "2018-04-17T19:38:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bdd06b1-4506-49ce-98ba-d17edfa74f7d", "eventTime": "2018-04-17T19:38:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cwP2Ob-YfE6OrR3GZVSbe6nRHZWsEtcYE2yAojnonKf2qYCBhGXcFu9uc0LvUIv6i37wgwC3wnMnzEe8Q5zBfYiay9VYShGES-GC0xKacVURYBmY4ad6Zy27RCK1dhMAAk1fIdmHiRDexdnkUiRJZF-_wNizjpD-ZEj1HBaAsav_-_l0QUuhXo22a_Ss4k2Wkr4kTgPxyjUT57mwUadO0Xsn-cGqvJubGH6krfHj3dq6cwOa5GX_XijEpM79ctsc12HRXhfhlZKMf9Hhg51m0gpCN1Qtwxhw9SAFYOUiUuvYNYwuhtqLSAnkjW6OcUwn8g2DXc2dSaxRoDlPnkY6IxHXa-S2lLMsow5N6lk12IzVXFaWjLOD6SC9p1WyLXocBXiq-XaFtKBTMP9ZpXJsGYNyn3GnerbwovQhRLXbmvjCRwibbsk2PQEk6IhQIhKhZYVgooTQOjP_JuvfNwn1ASTDDiRBeQt_1lTH1UuCWDC5wO63pBi805RFitH9PPnyURFe7T8UJxfB3mmPBYtHWKeeLpyQyjsLcoWxjSg0oNXOF8PTb20cEFhzv3S3wrOm_s0b6EmdQPoOLReLl9CYa0qtQmjS69Lr7k9NXorZ88AZgHDLzTntwsfqwlqnNLFvLuVCaMOKuGBs68aD4zWI28PWBzEb3Fj8Hijj1nk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b0bb23d-6cb3-4975-b7ac-866f9c331816", "record_id": "flaws_cloudtrail:0000457:5b0bb23d-6cb3-4975-b7ac-866f9c331816", "row_index": 457, "timestamp": "2018-04-17T19:38:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b0bb23d-6cb3-4975-b7ac-866f9c331816", "eventTime": "2018-04-17T19:38:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1e0911d-c5eb-448f-8161-86c3895fefa8", "record_id": "flaws_cloudtrail:0000458:f1e0911d-c5eb-448f-8161-86c3895fefa8", "row_index": 458, "timestamp": "2018-04-17T19:38:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1e0911d-c5eb-448f-8161-86c3895fefa8", "eventTime": "2018-04-17T19:38:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc5ce0a-477f-4765-996d-d133dd5e2087", "record_id": "flaws_cloudtrail:0000459:5bc5ce0a-477f-4765-996d-d133dd5e2087", "row_index": 459, "timestamp": "2018-04-17T19:38:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc5ce0a-477f-4765-996d-d133dd5e2087", "eventTime": "2018-04-17T19:38:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef707b34-d1c6-4b88-9d3e-a507ce420d84", "record_id": "flaws_cloudtrail:0000460:ef707b34-d1c6-4b88-9d3e-a507ce420d84", "row_index": 460, "timestamp": "2018-04-17T19:38:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef707b34-d1c6-4b88-9d3e-a507ce420d84", "eventTime": "2018-04-17T19:38:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342655-3554-43ee-a293-9a92ded018cd", "record_id": "flaws_cloudtrail:0000461:342655-3554-43ee-a293-9a92ded018cd", "row_index": 461, "timestamp": "2018-04-17T19:38:34Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342655-3554-43ee-a293-9a92ded018cd", "eventTime": "2018-04-17T19:38:34Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f621f8a-edd5-4166-a243-cf04742c", "record_id": "flaws_cloudtrail:0000462:7f621f8a-edd5-4166-a243-cf04742c", "row_index": 462, "timestamp": "2018-04-17T19:38:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f621f8a-edd5-4166-a243-cf04742c", "eventTime": "2018-04-17T19:38:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0eb05da-904a-49e9-9d2a-d45838aa2ae4", "record_id": "flaws_cloudtrail:0000463:a0eb05da-904a-49e9-9d2a-d45838aa2ae4", "row_index": 463, "timestamp": "2018-04-17T19:38:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0eb05da-904a-49e9-9d2a-d45838aa2ae4", "eventTime": "2018-04-17T19:38:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5e9fb3-733e-43bc-ba7b-c64d8af79262", "record_id": "flaws_cloudtrail:0000464:1c5e9fb3-733e-43bc-ba7b-c64d8af79262", "row_index": 464, "timestamp": "2018-04-17T19:38:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5e9fb3-733e-43bc-ba7b-c64d8af79262", "eventTime": "2018-04-17T19:38:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39499a-e870-40bd-b36d-4bf79530eda7", "record_id": "flaws_cloudtrail:0000465:39499a-e870-40bd-b36d-4bf79530eda7", "row_index": 465, "timestamp": "2018-04-17T19:38:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1835, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39499a-e870-40bd-b36d-4bf79530eda7", "eventTime": "2018-04-17T19:38:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: E9vbqqdTG7kCIW7ZUDCqnNLaPv1QxVJLTbWTAmNeBqNw7Mtmw7KE82sRtqPF7n-ta4jeuwHLAMFHQ4fbKDJCXaCGBp8qc3AoyrTQEFFgEuLW12WQZy_hwiSll8vPUn_WRuWVPOZSh2dhoZ92cwOCaPtsvElu02HHl8vzr2VqjUuO9ljRTDMP8Oe5mAq0alq3NGZfdQxYzgVp6tEacZj141mOb2l9wh5JXg-mdQqqVOvBdg72HmYzu-nWxz4P_smHj24PDrps6KLIT8x5M2c438Wz3HVZX2hqWGwOuu9ltvHzA3wDXp3pQAoa30Mx9rzZ6Q0zcGI1zVLJddrBhEiYX56BVZKCAoMbBKpFjpPFLf3NUcglae-8sAPna7tC_f6mr_jkmmwssTLhFdKHD-F2ZkGtuR8rAgLDf8hdESrQ_ng2fPQ9T9S0bvsYdPIDferseIW40dMV-3q5v8EJEkZtF3YO1aLLl6VhqLN7x7JInplX3hbESOX3dM8OqV0dGaOw99VJIUFh-poOXP5WdXiqCl9vGrMRGVV9FwWMQz84cOBLLaerVlCeWcPAXcPZQtr0KVMIQcsrJSyVq8LRFU56j-qG6Og8Z686FbNVTSbI2nAQ0xm9IisIEs973HFQoXZQpQGqepZ5QPP1IgrCVgcbyAkkf559tU5-n0PDEwk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bbe15be-e01f-47b8-bdfc-31e9c0049fec", "record_id": "flaws_cloudtrail:0000466:6bbe15be-e01f-47b8-bdfc-31e9c0049fec", "row_index": 466, "timestamp": "2018-04-17T19:38:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bbe15be-e01f-47b8-bdfc-31e9c0049fec", "eventTime": "2018-04-17T19:38:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1c1991-b766-4525-9c75-008363d336e", "record_id": "flaws_cloudtrail:0000467:7e1c1991-b766-4525-9c75-008363d336e", "row_index": 467, "timestamp": "2018-04-17T19:38:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1c1991-b766-4525-9c75-008363d336e", "eventTime": "2018-04-17T19:38:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7ae620e-ed39-4e94-87b2-5d7892cf74d6", "record_id": "flaws_cloudtrail:0000468:f7ae620e-ed39-4e94-87b2-5d7892cf74d6", "row_index": 468, "timestamp": "2018-04-17T19:38:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7ae620e-ed39-4e94-87b2-5d7892cf74d6", "eventTime": "2018-04-17T19:38:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Posfmp-D0_AiowIdY-KEflIuIsaogyMpTu8fo5733vPtTt59iKvnkBi7crtM70fNqDiG1qeqAvkf6UPNm8eE-UslQIC8fzUxZLb3ASm69Cp5jr6yBtDkE9E-W3LhabWDmficXaQwchvAdcJUcaPqRDIJcRV7XcuedUIP-G0TEVkInWiaIu-KIp_tPhAWCS5hWbeq2e0Sct9QWooCRyFFomyW8dZw1TIwYYXGLrfKPlZxizhWUQOXUBYancgWCvYpUc1rTKAvL0sGFlPMc69mUxLvs13KF8K9660Af4ID3lp5lvdnVyaqDJJppD4v8Uwfe4_srw6XoazEwzK8pRs_oHMnywF2tHqMelb5eXdVZNl08qrsy4e46VD3DjQJ7vXt4JcpT9hED3JPVmUQjdmzGiK2eZcXvMXbmgsnIYlir6bHIpbP069ZpqXwdv4nbJOBGkbNPlEeINhiMsqr5kSlgBQUt0JLoSYToOR7fL1rFV0mfd6EbUd9Zg8yKs9lRnHF9nuZf6vzQVxy-6m9Q9iCoV0qsnxGjOJ00Kd8ZM02pzFnAvO1LyDZyBMM-ypePFWDeaqBiYgiCiOMEER_R_z76uVVsrfTv6TU1idtI-pJfEzX85cRHqcaEPMzTDKwiebm5SHums1eD-nbYfMNmwLBzpzoNa0j2jpDCwU63g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c31462-193b-4c73-aa0a-6a1d39ceb9fe", "record_id": "flaws_cloudtrail:0000469:48c31462-193b-4c73-aa0a-6a1d39ceb9fe", "row_index": 469, "timestamp": "2018-04-17T19:38:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c31462-193b-4c73-aa0a-6a1d39ceb9fe", "eventTime": "2018-04-17T19:38:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dc0c5c8-15f7-4eeb-9128-bb3df24b8ba2", "record_id": "flaws_cloudtrail:0000470:6dc0c5c8-15f7-4eeb-9128-bb3df24b8ba2", "row_index": 470, "timestamp": "2018-04-17T19:38:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dc0c5c8-15f7-4eeb-9128-bb3df24b8ba2", "eventTime": "2018-04-17T19:38:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0519bc63-ef6b-4e70-abc6-7d6f519b8996", "record_id": "flaws_cloudtrail:0000471:0519bc63-ef6b-4e70-abc6-7d6f519b8996", "row_index": 471, "timestamp": "2018-04-17T19:38:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0519bc63-ef6b-4e70-abc6-7d6f519b8996", "eventTime": "2018-04-17T19:38:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c268ad1e-4864-46fb-96fb-b5edea354ded", "record_id": "flaws_cloudtrail:0000472:c268ad1e-4864-46fb-96fb-b5edea354ded", "row_index": 472, "timestamp": "2018-04-17T19:38:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c268ad1e-4864-46fb-96fb-b5edea354ded", "eventTime": "2018-04-17T19:38:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e57968-40bd-4118-92c5-c43152abb", "record_id": "flaws_cloudtrail:0000473:a0e57968-40bd-4118-92c5-c43152abb", "row_index": 473, "timestamp": "2018-04-17T19:38:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1272, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e57968-40bd-4118-92c5-c43152abb", "eventTime": "2018-04-17T19:38:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb7338b-f2d5-44ae-88c9-2e81a1b56bb6", "record_id": "flaws_cloudtrail:0000474:2cb7338b-f2d5-44ae-88c9-2e81a1b56bb6", "row_index": 474, "timestamp": "2018-04-17T19:38:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb7338b-f2d5-44ae-88c9-2e81a1b56bb6", "eventTime": "2018-04-17T19:38:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "714eb8f8-210b-43ce-943d-fbdba71d0b33", "record_id": "flaws_cloudtrail:0000475:714eb8f8-210b-43ce-943d-fbdba71d0b33", "row_index": 475, "timestamp": "2018-04-17T19:38:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "714eb8f8-210b-43ce-943d-fbdba71d0b33", "eventTime": "2018-04-17T19:38:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232266c34-7b7f-4edb-b62f-5cc186a513a0", "record_id": "flaws_cloudtrail:0000476:232266c34-7b7f-4edb-b62f-5cc186a513a0", "row_index": 476, "timestamp": "2018-04-17T19:38:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232266c34-7b7f-4edb-b62f-5cc186a513a0", "eventTime": "2018-04-17T19:38:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0f5f6d8-8bb1-4f9b-9b80-711e0818d9ab", "record_id": "flaws_cloudtrail:0000477:a0f5f6d8-8bb1-4f9b-9b80-711e0818d9ab", "row_index": 477, "timestamp": "2018-04-17T19:38:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0f5f6d8-8bb1-4f9b-9b80-711e0818d9ab", "eventTime": "2018-04-17T19:38:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nL_xl0x4VblS4iy4WrBauvhzzhC1wCa8FwlndH3MGAb8g8QUh0MEpdxzCj3A7r1-2FuHNuJ8ksFNfOpAi6V8pADWf7mwcGG5gj1JIonYyJ9xcloJWAQIFyEKaO-aE-jDmB7of2S7s3UNd52iF8bP4dpVA5z3NvVD3bqCZ0om6K31iziyBhWa6yqW2bv34ZxOYKrcH24faWDKlEXlurvfLVjKc-D8oXDgOHD6TwbY3NWBvMvBHI90DtDWVNawTILdll5hNEcXv4QCMudfj55yT67PzQCowaU359IT0nCXncXpysFl33XW8-vyAoEZNuIv4w0my-MhGo497t-zy2h5dbd8XVrVSjxi2ZF3ZYozSsSeiOh7wEDrd970bclsY3e5tol68I3_nLIePA3sCRMXCjew4cmfV8srLcHeaziYJZPPj4xRRgpELszEU3Jy74z20jfomgItnarLbsfwoMKKm99DAIViacM941p1xto8eD1whwvuudFSk4OEJl0MACrd8XOQyzn-ZajLVj9WwQKdqPLKU8N5Jxx1hbF0S_9jDn28qsdqzR1KPdljPMSUWuWWZ3rTH7PGNdiVwGb5lS8kwdAsgMrz9kuUIq9wknTyUfciSBsIqM7OFIB_XNFQgpAwG-6UVtxdG5vjviGN-1lSq54jMCGIaR6EVw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c986f50a-580e-4b70-988e-45f1200bd3bf", "record_id": "flaws_cloudtrail:0000478:c986f50a-580e-4b70-988e-45f1200bd3bf", "row_index": 478, "timestamp": "2018-04-17T19:38:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c986f50a-580e-4b70-988e-45f1200bd3bf", "eventTime": "2018-04-17T19:38:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fafba3d7-b3d2-4f4b-abec-1e83d8640054", "record_id": "flaws_cloudtrail:0000479:fafba3d7-b3d2-4f4b-abec-1e83d8640054", "row_index": 479, "timestamp": "2018-04-17T19:38:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fafba3d7-b3d2-4f4b-abec-1e83d8640054", "eventTime": "2018-04-17T19:38:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2acd4fb-80da-41b5-aa1f-d17aecaf5ca6", "record_id": "flaws_cloudtrail:0000480:c2acd4fb-80da-41b5-aa1f-d17aecaf5ca6", "row_index": 480, "timestamp": "2018-04-17T19:38:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2acd4fb-80da-41b5-aa1f-d17aecaf5ca6", "eventTime": "2018-04-17T19:38:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317483c05-6678-41f1-89c6-965d9fbbf94b", "record_id": "flaws_cloudtrail:0000481:317483c05-6678-41f1-89c6-965d9fbbf94b", "row_index": 481, "timestamp": "2018-04-17T19:38:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317483c05-6678-41f1-89c6-965d9fbbf94b", "eventTime": "2018-04-17T19:38:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b99bfa-c369-44d3-aa30-ce60cc9d308a", "record_id": "flaws_cloudtrail:0000482:c4b99bfa-c369-44d3-aa30-ce60cc9d308a", "row_index": 482, "timestamp": "2018-04-17T19:38:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b99bfa-c369-44d3-aa30-ce60cc9d308a", "eventTime": "2018-04-17T19:38:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a39247-a9ae-4910-a35c-a0c59f062c6b", "record_id": "flaws_cloudtrail:0000483:a39247-a9ae-4910-a35c-a0c59f062c6b", "row_index": 483, "timestamp": "2018-04-17T19:38:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a39247-a9ae-4910-a35c-a0c59f062c6b", "eventTime": "2018-04-17T19:38:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02490-ac01-4dc8-9157-00c36ce74a70", "record_id": "flaws_cloudtrail:0000484:02490-ac01-4dc8-9157-00c36ce74a70", "row_index": 484, "timestamp": "2018-04-17T19:38:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02490-ac01-4dc8-9157-00c36ce74a70", "eventTime": "2018-04-17T19:38:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97b446d-343f-47e2-8683-1fd9ddbb9957", "record_id": "flaws_cloudtrail:0000485:f97b446d-343f-47e2-8683-1fd9ddbb9957", "row_index": 485, "timestamp": "2018-04-17T19:38:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97b446d-343f-47e2-8683-1fd9ddbb9957", "eventTime": "2018-04-17T19:38:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba54f11-f300-4641-bcb6-1686df80a4db", "record_id": "flaws_cloudtrail:0000486:3ba54f11-f300-4641-bcb6-1686df80a4db", "row_index": 486, "timestamp": "2018-04-17T19:38:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba54f11-f300-4641-bcb6-1686df80a4db", "eventTime": "2018-04-17T19:38:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00a4d273-1258-44d8-9283-b4e962d742a5", "record_id": "flaws_cloudtrail:0000487:00a4d273-1258-44d8-9283-b4e962d742a5", "row_index": 487, "timestamp": "2018-04-17T19:38:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00a4d273-1258-44d8-9283-b4e962d742a5", "eventTime": "2018-04-17T19:38:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff0be074-1191-41ca-8c26-e5103ea6eb00", "record_id": "flaws_cloudtrail:0000488:ff0be074-1191-41ca-8c26-e5103ea6eb00", "row_index": 488, "timestamp": "2018-04-17T19:38:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff0be074-1191-41ca-8c26-e5103ea6eb00", "eventTime": "2018-04-17T19:38:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e57bcb70-9986-4579-8b6a-8730d125b951", "record_id": "flaws_cloudtrail:0000489:e57bcb70-9986-4579-8b6a-8730d125b951", "row_index": 489, "timestamp": "2018-04-17T19:38:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e57bcb70-9986-4579-8b6a-8730d125b951", "eventTime": "2018-04-17T19:38:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af13fee6-df0e-4e91-8652-5e02c20ef566", "record_id": "flaws_cloudtrail:0000490:af13fee6-df0e-4e91-8652-5e02c20ef566", "row_index": 490, "timestamp": "2018-04-17T19:38:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af13fee6-df0e-4e91-8652-5e02c20ef566", "eventTime": "2018-04-17T19:38:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: uK0cjkJIVF_wjQEBIMnraSCPuckyvCqAZO2NsYvx9OVLujnH8Q0LE16JMtO-7blzxPiI25SwpWuQOQqbDjcwYcQYKpNBDsq9VLcgf5-T5ZpA56Wz_MpipXAmSZIH4SDD6XoDuv-FZ4KhYHSptxIxBLaqB5MQ_GT_BywtYOAczF3qeDUZc-TbBzZ4tUTP2Om1GG62hE7Yg93DAIqtLOLZrmiVph25UxkLg_7jc2JYZWRFH-4Gwm3Ntg0cD5QfvtNN6UIYiBh0h7pO7XU0sMW1hZsfk0xEaQKDmP5xmAQHI-ciB0U2tfy_6QYJxQb21Bak5yRS75yUuNJ4D0IiJvChvVxFAT23oYJLKKkrsrY1gqSdNTthWlxHSuUoTJa0rx9YuKEf9aeIglp25nBQKVkSOURa-Q5ZKahqcNfwjzMhZJbimA_ch12zeD5Ar5NaFAlduZfBm1eeYzOWPKMotekKV7CldC-ZAa6iVCXUaOLAsjqlnWj6p14vwrBPt1s11CqHxWpCPDORbQ1akerb5PCozH8qJhyF_N_I8g0V1T02OaxDxDNRwLO_JjL3HHzQ2iIThULy6qOFl7uxc-Gl3XNPgY7jku8KZgXR-3bnic8AXCr7TpbTQdDDCgiEM3HP5xNAo-5wnTv5BRacgQGySjzWSYWbl_rj6RbMcQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ab0b58-4434-4c5d-812e-000df9e43009", "record_id": "flaws_cloudtrail:0000491:d0ab0b58-4434-4c5d-812e-000df9e43009", "row_index": 491, "timestamp": "2018-04-17T19:38:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ab0b58-4434-4c5d-812e-000df9e43009", "eventTime": "2018-04-17T19:38:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71eaafbe-9255-48e7-a657-a7c352551a2c0", "record_id": "flaws_cloudtrail:0000492:71eaafbe-9255-48e7-a657-a7c352551a2c0", "row_index": 492, "timestamp": "2018-04-17T19:38:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71eaafbe-9255-48e7-a657-a7c352551a2c0", "eventTime": "2018-04-17T19:38:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbaf5a0c-bba9-49d1-ba88-03ab16b89abd", "record_id": "flaws_cloudtrail:0000493:dbaf5a0c-bba9-49d1-ba88-03ab16b89abd", "row_index": 493, "timestamp": "2018-04-17T19:38:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbaf5a0c-bba9-49d1-ba88-03ab16b89abd", "eventTime": "2018-04-17T19:38:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248800db6-ac29-4164-836a-507731f476e3", "record_id": "flaws_cloudtrail:0000494:248800db6-ac29-4164-836a-507731f476e3", "row_index": 494, "timestamp": "2018-04-17T19:38:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248800db6-ac29-4164-836a-507731f476e3", "eventTime": "2018-04-17T19:38:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaac31d9-f0ba-49e6-9afa-3aa0ecac122d", "record_id": "flaws_cloudtrail:0000495:aaac31d9-f0ba-49e6-9afa-3aa0ecac122d", "row_index": 495, "timestamp": "2018-04-17T19:38:44Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaac31d9-f0ba-49e6-9afa-3aa0ecac122d", "eventTime": "2018-04-17T19:38:44Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdec5409-7d54-419c-8f48-16e5851c0be7", "record_id": "flaws_cloudtrail:0000496:bdec5409-7d54-419c-8f48-16e5851c0be7", "row_index": 496, "timestamp": "2018-04-17T19:38:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdec5409-7d54-419c-8f48-16e5851c0be7", "eventTime": "2018-04-17T19:38:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a35c64e-76a0-472f-858c-b7f4cc8e1afd", "record_id": "flaws_cloudtrail:0000497:8a35c64e-76a0-472f-858c-b7f4cc8e1afd", "row_index": 497, "timestamp": "2018-04-17T19:38:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a35c64e-76a0-472f-858c-b7f4cc8e1afd", "eventTime": "2018-04-17T19:38:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88429dd-85bf-4e88-8240-49c2f5fbc0c3", "record_id": "flaws_cloudtrail:0000498:88429dd-85bf-4e88-8240-49c2f5fbc0c3", "row_index": 498, "timestamp": "2018-04-17T19:38:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88429dd-85bf-4e88-8240-49c2f5fbc0c3", "eventTime": "2018-04-17T19:38:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bad2c21-1d35-4ae8-b748-17463b57d78f", "record_id": "flaws_cloudtrail:0000499:4bad2c21-1d35-4ae8-b748-17463b57d78f", "row_index": 499, "timestamp": "2018-04-17T19:38:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bad2c21-1d35-4ae8-b748-17463b57d78f", "eventTime": "2018-04-17T19:38:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d87d537a-b683-4650-9785-7b1b2e299e42", "record_id": "flaws_cloudtrail:0000500:d87d537a-b683-4650-9785-7b1b2e299e42", "row_index": 500, "timestamp": "2018-04-17T19:38:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d87d537a-b683-4650-9785-7b1b2e299e42", "eventTime": "2018-04-17T19:38:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbece378-d905-4fbe-a6b1-270e615c7ef1", "record_id": "flaws_cloudtrail:0000501:dbece378-d905-4fbe-a6b1-270e615c7ef1", "row_index": 501, "timestamp": "2018-04-17T19:38:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbece378-d905-4fbe-a6b1-270e615c7ef1", "eventTime": "2018-04-17T19:38:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: uQonvxzqFjmjTgVy9Fb3W5OahVUlWC-2S2bCUnuNFKM5chcEf3mSpD9l3fxEc5mG6EnLUcYYUu2mYa2B4BsmQXZyuExAoHk7ZIIXbj-pNmcMzwXuFlIaB7VeOKRFgzwDLSSaDbDCpW0MvFPcPsU6b7kGSXwsy4QL3yQaVuSds2Vso-yg48tRUCrTWyT6O7HkGlTPdpkwPBe-t-v_G9oQSJ-GVYgfHiYpii60R5dVJj7r-a-ZrXKQXFNd1Nf5a2CyR5IM6T6ebimnnZXcY-BRR7K2TOJVI3hDgOH4Tq_3WmXidLNixtfciz51V-rBQmvgCbmEjhXNQ3bhySCtb5MkxyDrFN2uRQyNyM9nV_6mnKDSvRlHZ2BBJ9BgDTw8Q2vGBDGSZkCXpiBOu-pJdjhfJlQkQtOfKb1xAgUSaNnGJHmB7v4MCjzkohWpi8-DKsZIfVgLLP2AsPhkbktQpIigmLxukO5XrswDHBFGhSUIzocX4CmmkvY0mONQibeLXB4YwX4qgFh5Yb1GgbhWeHsbS4VLXe6Hk9CTyo0LsU6oinrGMfzWSywbszOhZf6zXm5V5c6vKxWvuA9DExFJui08xSMganb9gehRDMCfxCI8bA_1-mh_zn_aG37VcLgZ4fcF2n9b2z8YZrGF_jCowiXJVpjJPjfeMIek", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "745001e3-974c-4ff1-843d-9c409818a879", "record_id": "flaws_cloudtrail:0000502:745001e3-974c-4ff1-843d-9c409818a879", "row_index": 502, "timestamp": "2018-04-17T19:38:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "745001e3-974c-4ff1-843d-9c409818a879", "eventTime": "2018-04-17T19:38:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41caacc7-5bc6-4ced-88fb-d07e910daf8d", "record_id": "flaws_cloudtrail:0000503:41caacc7-5bc6-4ced-88fb-d07e910daf8d", "row_index": 503, "timestamp": "2018-04-17T19:38:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41caacc7-5bc6-4ced-88fb-d07e910daf8d", "eventTime": "2018-04-17T19:38:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dfGMfJqaCQKGKv5WVioU1Obip6OXIkbL600d_1K7UNzCisB5cgH35w7vST0avouaZp8ICWSgip7SL-xouQbIqe2JouyHw3Hg9pAIzyx1K2ufWkEurT6uIIwRidUy3RyADDOU324L5ZBFmbT5m7Ea_E52xFWd5Vfnpa2LP8N9WRw83KSmS20Q7Af-HbQxmhkTmPITdbmW-Y-Gbaid8GftH3zZS_-wkGH0pkeDw0qju8aGkOYVBaYtuJf1CDiCDq3b4TpaCFH4BFaHOcYkqQocRYfajBtZDiKkdGBzw-JLlqQd9Lo8Un7MYhpJ5YIRW2ICEriHmiykk465nu_VLHsNKQMLmvX8aEtXGcJV3V_Jyrl4qbU0dlrRRpn4OG7pBscpFQAwRor_otdtOXUTDPp03tlyN4LuC4injA_8uyCJ5YtnfaTfgJJtUO1A-6047mX_lO7evOPR0lNEBP9LHEmE7Fytrbv4ylexY_myl3Ph8nv4rjnLUByb3Y9C8CtKjq6XfHzTvl2zJe5XDGbxF8_BpzBd8A3u6m2k6G84DHbYwec5kpOczpwfoTSPbx9oU1SmKZo4Du_x8gcl59dZ2HoG1syKNAFLOFtdLyG4VzYS3S1ocfmlgs8zogWPwXVlrY43fSCy2UfupePm6ICawq69ioFFq8-nl0JYGu8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab4053f4-3e84-4a46-a0a2-7f3d0802d346", "record_id": "flaws_cloudtrail:0000504:ab4053f4-3e84-4a46-a0a2-7f3d0802d346", "row_index": 504, "timestamp": "2018-04-17T19:38:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab4053f4-3e84-4a46-a0a2-7f3d0802d346", "eventTime": "2018-04-17T19:38:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: w4MrW2kdQIVEwwrIsobAn5o5M0NTven5fITnCHeJWCP3oMb438FXRbur3bBcC6ZiDj--Y-x7SvXBVIuEtOJCzQgkB4N8mX5PuLqpS64biTTTDriEcDHnegvZiY_e91X8NEjbbD0T000NoVFBfWKrfmJ0IxdjiwvXsSlmd4wsSyw2j2yoZ903dQYNLBOSDdCSjCUDxhynugm9JAwNHWDoA7RitGGk2Cw3Nc_1MX4tvXUSYzdMksKTSLyuj1M3gq-nttVioEGYehHVbmicfkTGkfxt5v6Ydvbjn5YAuwnSNGGlZqwWZ8r-SJZjxW548pRTPZcj9sCQ3JK2lcvGv0ZI-3yYFhjuDpqQga-btF1Oz2qicaGGG1h3It4WYGawPk3yhNL0LFG0sw07DI42Ni5DENNfDcvheJXYTvBwv6tnGG0r57iLZu8_ZpF6oWhQqJIqsOLRTkrAIQ8l5GCNH3xamysHEEy-shH2eWuHbp1_GIT_0sioA3GuNcItDeacI87VWEvLJy1Io_audFUaeKRAlOYcAhKv1JwGjXmnQlar0KGU5C5KCURGGnBZf_bWTZY5N0t-oivemAWMGaDBROJ9ZvW8PFHmGq9_2CslLr5KMygcJob78Bhj8nRk_qZe57EkWbq8SesvUF75Bv-t265T6qNx7QSdTo-7syi4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8a38f7-fc62-4ca7-9bfb-c517272b8abe", "record_id": "flaws_cloudtrail:0000505:1e8a38f7-fc62-4ca7-9bfb-c517272b8abe", "row_index": 505, "timestamp": "2018-04-17T19:38:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8a38f7-fc62-4ca7-9bfb-c517272b8abe", "eventTime": "2018-04-17T19:38:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e2c232-547c-4401-88cf-ad7f3eafedc1", "record_id": "flaws_cloudtrail:0000506:a2e2c232-547c-4401-88cf-ad7f3eafedc1", "row_index": 506, "timestamp": "2018-04-17T19:38:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e2c232-547c-4401-88cf-ad7f3eafedc1", "eventTime": "2018-04-17T19:38:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad290ba1-e1c5-4f10-96b6-ed2560b556cd", "record_id": "flaws_cloudtrail:0000507:ad290ba1-e1c5-4f10-96b6-ed2560b556cd", "row_index": 507, "timestamp": "2018-04-17T19:38:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad290ba1-e1c5-4f10-96b6-ed2560b556cd", "eventTime": "2018-04-17T19:38:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9f204918-b98a-4632-b9c5-afa10e9a3789", "record_id": "flaws_cloudtrail:0000508:b9f204918-b98a-4632-b9c5-afa10e9a3789", "row_index": 508, "timestamp": "2018-04-17T19:38:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9f204918-b98a-4632-b9c5-afa10e9a3789", "eventTime": "2018-04-17T19:38:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbce57cb-5c4f-4ca2-b295-a557d6be1a70", "record_id": "flaws_cloudtrail:0000509:fbce57cb-5c4f-4ca2-b295-a557d6be1a70", "row_index": 509, "timestamp": "2018-04-17T19:38:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbce57cb-5c4f-4ca2-b295-a557d6be1a70", "eventTime": "2018-04-17T19:38:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "282618c48-b64a-4e93-af22-e1ba58c8a3e1", "record_id": "flaws_cloudtrail:0000510:282618c48-b64a-4e93-af22-e1ba58c8a3e1", "row_index": 510, "timestamp": "2018-04-17T19:38:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "282618c48-b64a-4e93-af22-e1ba58c8a3e1", "eventTime": "2018-04-17T19:38:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2372aab2-d960-4734-b323-5a91a3d9d447", "record_id": "flaws_cloudtrail:0000511:2372aab2-d960-4734-b323-5a91a3d9d447", "row_index": 511, "timestamp": "2018-04-17T19:38:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2372aab2-d960-4734-b323-5a91a3d9d447", "eventTime": "2018-04-17T19:38:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7bac374-3e6c-470e-ae46-bf565c5c2a9c", "record_id": "flaws_cloudtrail:0000512:b7bac374-3e6c-470e-ae46-bf565c5c2a9c", "row_index": 512, "timestamp": "2018-04-17T19:38:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7bac374-3e6c-470e-ae46-bf565c5c2a9c", "eventTime": "2018-04-17T19:38:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 0gphp9QUhFV14mBO4bOs_7oYBF3broxkbkMELcns0CY0GlYfRPEgJeVWq4YEKMpKbIJAs65V1__HDMGLtVPAt9S67DF1nXtdrwa-7-cxaZpuW0RctKyQpfe1aYgaCquS_7xZSt1M3UtWHmW_15-KuoWaUKvZFA4YccSIKNUcnliK9jdtfRCVqcEnpe5Ga4W8jqsXXrTxraPOms_JJeRNAmW_Nfk_qEc8n28qbPBMnkPDAvsUkYEdr8xxtvft7xYxPuIEs-YQ3WD6NHZBYZt8u9lel30bbgzlAcPux_erOe48fTvWqqwDASEqThyC_1otsOTP4zaymzQM6IJ7D3xu2kMRICofkK75UBJEIkUZZh7PUdUtB35ciTIo8Dq5M93varQaWJkMIMR-6G9OFOVWveCSGeMe3Ggydd-OwCK0ZGAVxHWXNoZgpXvnopQoxctyBmBeckdWWZxz_DXf_sCA55Jue6a2OrGVLXgVs_YRpCq3RFEBjJK9MqGIQ-cKXT7hRDWScpVgJLtWgAWGXkV-vft-cZJ1XXsysKQxmc3ghBgntx_w8pHRU5f_4JL55mxBntGjG95RRh7vyIA_MVgE21VjSiwTNinN1EOVpl5ORY23NHWjsXCB66au4YN4PWwmPI-RQkllaYt932AY6Ohl7l622e3zfOdz_mo", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfa8bfe6-730c-413a-a681-01ce632873", "record_id": "flaws_cloudtrail:0000513:dfa8bfe6-730c-413a-a681-01ce632873", "row_index": 513, "timestamp": "2018-04-17T19:38:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1272, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfa8bfe6-730c-413a-a681-01ce632873", "eventTime": "2018-04-17T19:38:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9b4fc53-919f-46b9-8cb7-750e567c552a", "record_id": "flaws_cloudtrail:0000514:b9b4fc53-919f-46b9-8cb7-750e567c552a", "row_index": 514, "timestamp": "2018-04-17T19:38:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9b4fc53-919f-46b9-8cb7-750e567c552a", "eventTime": "2018-04-17T19:38:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6975d01d-5447-4f24-b91e-1c22963e9dd6", "record_id": "flaws_cloudtrail:0000515:6975d01d-5447-4f24-b91e-1c22963e9dd6", "row_index": 515, "timestamp": "2018-04-17T19:38:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6975d01d-5447-4f24-b91e-1c22963e9dd6", "eventTime": "2018-04-17T19:38:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nZmlIuhf1iKz-W6JSU1T1n0FEh_AX7xVXBi6e7E_3zejAxCyaquY3C1mfnfkGhapiVhoALynszLx943J02plueYVqAzBkuquFmLN5cg0zQwGBfV8fdkpnUQc4y8ta4maiVV1sbdRc1ZL5j4C5hQgALGcrxMhKF6ptN_G6DAwgxiWUlkKEPXyFiYT7igXgclP0vwFhsyAhPu73tx6yvoZgg5_MNZdlRhd1jbP6drldrA-lt8FmbczZmyPD1K85DEY7NFHWe26aVOYwQvhaq3C_Nv1JjDI0xqJapNNFIzd2Fu_dCIETQJkX24ZRY7hdHfiECDGypsUQvOp12g7dREvK9OhxRO2Ypku6JhWdSWHJLeP0gEjvX952Xt3MU9UbLybhb_TfQhiq7bMzpW-APgV-iMIMbQpqj8wjZzp8Dw83hf1J_GVxmwi6TZBfzozZKW9a7RKZKU5-XknXyEM7kY0JSyg2iR5-jeydd-krwjnB0M3vDEC_ltsw5Y3wCaGlzbPxxOIK4ukvGffp4D0tyvMTh6McWRchS8_DdtCPEnXXh7RB32rcWve8YO6ZVWTrE6NgjYWEKRErA71xNtecheRfcaPM4jEjWhoD5hDAHzUmmNQGu9qWiucURlQhslMSntcu96R2JxEUIGMGJoFYym_7lWCbpTpm1hkjTs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c29753-250e-438e-bb48-340bed309086", "record_id": "flaws_cloudtrail:0000516:29c29753-250e-438e-bb48-340bed309086", "row_index": 516, "timestamp": "2018-04-17T19:42:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/backup-elevated-14"], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c29753-250e-438e-bb48-340bed309086", "eventTime": "2018-04-17T19:42:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/backup-elevated-14", "roleSessionName": "backup-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/backup-elevated-14"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b73faff5-f453-4b5f-bf55-3e5aff0e014e", "record_id": "flaws_cloudtrail:0000517:b73faff5-f453-4b5f-bf55-3e5aff0e014e", "row_index": 517, "timestamp": "2018-04-17T19:43:28Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAVK3QLK3SMAR87KIP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.228.133.46", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-7807"], "raw_record_size_bytes": 651, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b73faff5-f453-4b5f-bf55-3e5aff0e014e", "eventTime": "2018-04-17T19:43:28Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.228.133.46", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAVK3QLK3SMAR87KIP", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-7807", "key": "reports/585.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7807"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72eb94f-b1fa-4f2c-9812-664685686195", "record_id": "flaws_cloudtrail:0000518:e72eb94f-b1fa-4f2c-9812-664685686195", "row_index": 518, "timestamp": "2018-04-17T19:51:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72eb94f-b1fa-4f2c-9812-664685686195", "eventTime": "2018-04-17T19:51:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec110f18-55f0-44cf-a9e0-2f3cbe86fe39", "record_id": "flaws_cloudtrail:0000519:ec110f18-55f0-44cf-a9e0-2f3cbe86fe39", "row_index": 519, "timestamp": "2018-04-17T19:51:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec110f18-55f0-44cf-a9e0-2f3cbe86fe39", "eventTime": "2018-04-17T19:51:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9b184e3-bd82-480b-b059-4ba48495f114", "record_id": "flaws_cloudtrail:0000520:c9b184e3-bd82-480b-b059-4ba48495f114", "row_index": 520, "timestamp": "2018-04-17T19:51:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9b184e3-bd82-480b-b059-4ba48495f114", "eventTime": "2018-04-17T19:51:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f01d82-6031-442d-a167-ed1ba3a8e415", "record_id": "flaws_cloudtrail:0000521:a7f01d82-6031-442d-a167-ed1ba3a8e415", "row_index": 521, "timestamp": "2018-04-17T19:51:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f01d82-6031-442d-a167-ed1ba3a8e415", "eventTime": "2018-04-17T19:51:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b69db9e-0d8e-4273-8321-36da6d9d8c87", "record_id": "flaws_cloudtrail:0000522:8b69db9e-0d8e-4273-8321-36da6d9d8c87", "row_index": 522, "timestamp": "2018-04-17T19:51:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b69db9e-0d8e-4273-8321-36da6d9d8c87", "eventTime": "2018-04-17T19:51:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f984316b-0cad-437d-b655-2c3bed0bcc3a", "record_id": "flaws_cloudtrail:0000523:f984316b-0cad-437d-b655-2c3bed0bcc3a", "row_index": 523, "timestamp": "2018-04-17T19:51:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f984316b-0cad-437d-b655-2c3bed0bcc3a", "eventTime": "2018-04-17T19:51:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2f8e210-b631-4f73-a52f-bb8d971175b9", "record_id": "flaws_cloudtrail:0000524:a2f8e210-b631-4f73-a52f-bb8d971175b9", "row_index": 524, "timestamp": "2018-04-17T19:51:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2f8e210-b631-4f73-a52f-bb8d971175b9", "eventTime": "2018-04-17T19:51:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bba1b930-3448-4884-92fe-85486d37a10e", "record_id": "flaws_cloudtrail:0000525:bba1b930-3448-4884-92fe-85486d37a10e", "row_index": 525, "timestamp": "2018-04-17T19:51:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bba1b930-3448-4884-92fe-85486d37a10e", "eventTime": "2018-04-17T19:51:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0800c3f2-e4f0-4716-9089-7fc980dafbae", "record_id": "flaws_cloudtrail:0000526:0800c3f2-e4f0-4716-9089-7fc980dafbae", "row_index": 526, "timestamp": "2018-04-17T19:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0800c3f2-e4f0-4716-9089-7fc980dafbae", "eventTime": "2018-04-17T19:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c87d89-b004-40ac-83d6-d6dcbf05ac86", "record_id": "flaws_cloudtrail:0000527:f8c87d89-b004-40ac-83d6-d6dcbf05ac86", "row_index": 527, "timestamp": "2018-04-17T19:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c87d89-b004-40ac-83d6-d6dcbf05ac86", "eventTime": "2018-04-17T19:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3672ed8e-d2ce-47a6-a22a-da280a16ac6e", "record_id": "flaws_cloudtrail:0000528:3672ed8e-d2ce-47a6-a22a-da280a16ac6e", "row_index": 528, "timestamp": "2018-04-17T19:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3672ed8e-d2ce-47a6-a22a-da280a16ac6e", "eventTime": "2018-04-17T19:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "117a5116-2dc1-45f1-8bb9-35959ed", "record_id": "flaws_cloudtrail:0000529:117a5116-2dc1-45f1-8bb9-35959ed", "row_index": 529, "timestamp": "2018-04-17T19:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "117a5116-2dc1-45f1-8bb9-35959ed", "eventTime": "2018-04-17T19:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9742f629-0689-44be-a169-370d46558ed", "record_id": "flaws_cloudtrail:0000530:9742f629-0689-44be-a169-370d46558ed", "row_index": 530, "timestamp": "2018-04-17T19:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9742f629-0689-44be-a169-370d46558ed", "eventTime": "2018-04-17T19:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bce8ebb3-90ff-4666-9d21-2e8b0cb7fded", "record_id": "flaws_cloudtrail:0000531:bce8ebb3-90ff-4666-9d21-2e8b0cb7fded", "row_index": 531, "timestamp": "2018-04-17T19:51:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bce8ebb3-90ff-4666-9d21-2e8b0cb7fded", "eventTime": "2018-04-17T19:51:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74dca1c-810d-49a9-b063-6049c5eb0d44", "record_id": "flaws_cloudtrail:0000532:a74dca1c-810d-49a9-b063-6049c5eb0d44", "row_index": 532, "timestamp": "2018-04-17T19:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74dca1c-810d-49a9-b063-6049c5eb0d44", "eventTime": "2018-04-17T19:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9160d11d-2a20-496c-bb2f-77d070e54627", "record_id": "flaws_cloudtrail:0000533:9160d11d-2a20-496c-bb2f-77d070e54627", "row_index": 533, "timestamp": "2018-04-17T19:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9160d11d-2a20-496c-bb2f-77d070e54627", "eventTime": "2018-04-17T19:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd50e0-75b6-445d-a108-36828cf73ec1", "record_id": "flaws_cloudtrail:0000534:7bfd50e0-75b6-445d-a108-36828cf73ec1", "row_index": 534, "timestamp": "2018-04-17T19:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd50e0-75b6-445d-a108-36828cf73ec1", "eventTime": "2018-04-17T19:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456ae87d-5930-4f7f-bf76-abf3dd9765f6", "record_id": "flaws_cloudtrail:0000535:456ae87d-5930-4f7f-bf76-abf3dd9765f6", "row_index": 535, "timestamp": "2018-04-17T19:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456ae87d-5930-4f7f-bf76-abf3dd9765f6", "eventTime": "2018-04-17T19:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4983e937-6705-4a95-8087-475e1d238efb", "record_id": "flaws_cloudtrail:0000536:4983e937-6705-4a95-8087-475e1d238efb", "row_index": 536, "timestamp": "2018-04-17T19:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4983e937-6705-4a95-8087-475e1d238efb", "eventTime": "2018-04-17T19:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c7e374-3118-420b-8c52-692d9353f3a8", "record_id": "flaws_cloudtrail:0000537:90c7e374-3118-420b-8c52-692d9353f3a8", "row_index": 537, "timestamp": "2018-04-17T19:51:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c7e374-3118-420b-8c52-692d9353f3a8", "eventTime": "2018-04-17T19:51:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e565a3d5-3dbf-4a28-9fc9-519aac5eee6c", "record_id": "flaws_cloudtrail:0000538:e565a3d5-3dbf-4a28-9fc9-519aac5eee6c", "row_index": 538, "timestamp": "2018-04-17T19:51:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e565a3d5-3dbf-4a28-9fc9-519aac5eee6c", "eventTime": "2018-04-17T19:51:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a382052d5-ba52-4882-b6e8-2aed630b76fb", "record_id": "flaws_cloudtrail:0000539:a382052d5-ba52-4882-b6e8-2aed630b76fb", "row_index": 539, "timestamp": "2018-04-17T19:51:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a382052d5-ba52-4882-b6e8-2aed630b76fb", "eventTime": "2018-04-17T19:51:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85c221f2-52ef-4d49-80ea-9228736882f0", "record_id": "flaws_cloudtrail:0000540:85c221f2-52ef-4d49-80ea-9228736882f0", "row_index": 540, "timestamp": "2018-04-17T19:51:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85c221f2-52ef-4d49-80ea-9228736882f0", "eventTime": "2018-04-17T19:51:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "927d9f86-5bea-438f-b912-0052f6572fea", "record_id": "flaws_cloudtrail:0000541:927d9f86-5bea-438f-b912-0052f6572fea", "row_index": 541, "timestamp": "2018-04-17T19:51:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "927d9f86-5bea-438f-b912-0052f6572fea", "eventTime": "2018-04-17T19:51:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f054c631-e62a-415e-a4b7-9003bdb530b0", "record_id": "flaws_cloudtrail:0000542:f054c631-e62a-415e-a4b7-9003bdb530b0", "row_index": 542, "timestamp": "2018-04-17T19:51:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f054c631-e62a-415e-a4b7-9003bdb530b0", "eventTime": "2018-04-17T19:51:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a872cc-530e-4da4-9d87-44dd53cab6ee", "record_id": "flaws_cloudtrail:0000543:52a872cc-530e-4da4-9d87-44dd53cab6ee", "row_index": 543, "timestamp": "2018-04-17T19:51:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a872cc-530e-4da4-9d87-44dd53cab6ee", "eventTime": "2018-04-17T19:51:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330ef11e-1f38-49ae-990b-75c5ebf35af7", "record_id": "flaws_cloudtrail:0000544:330ef11e-1f38-49ae-990b-75c5ebf35af7", "row_index": 544, "timestamp": "2018-04-17T19:51:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330ef11e-1f38-49ae-990b-75c5ebf35af7", "eventTime": "2018-04-17T19:51:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8725cb02-6188-44e5-8782-1d44d44382d", "record_id": "flaws_cloudtrail:0000545:8725cb02-6188-44e5-8782-1d44d44382d", "row_index": 545, "timestamp": "2018-04-17T19:51:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8725cb02-6188-44e5-8782-1d44d44382d", "eventTime": "2018-04-17T19:51:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cfbc623-57ea-42bb-b135-12bbd0f01b66", "record_id": "flaws_cloudtrail:0000546:4cfbc623-57ea-42bb-b135-12bbd0f01b66", "row_index": 546, "timestamp": "2018-04-17T19:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cfbc623-57ea-42bb-b135-12bbd0f01b66", "eventTime": "2018-04-17T19:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VLaOxpjixRDoseF_s7MvEw8vuYHtkTASq1Ck66OFSv722THo53WAj9gwrpeMeYkhUvW7UzCM_aiZhW3LM_G8aJDL-Hs9KXOfNzY94ClfVOqzKAsUWoJNhKZhbycBXU9LtfIQGIHVjIabud-I-isCNAZA_lFY3UpttmEupTcGTsXeGQZLA-MixT8u_KlAEzpxReIwthPy7gisg6sgHnIJfpCfwl2Wsy3AprFy7esPDYwFAeKLnhhaD5nGk2DNNxUpErW_b0Abeb4bXcshtdUNxOI8fLyW46MUHkuhFt1yEFUGU82u2rfouP7VEUeVpWWvNN89rcwTUFRw685IZJ6GLw2qxKJuD_H3ZLmrNvF_uR22f18PuPI42Y0V1zzXJmwAsFZkgB33Pn9vvHcOz-vrFG7fQVQMD2PwiuA7Ce0Q4N7CrEbM8GeBwfjMOOBeu5LVL9nC4RQXtAm1plT92HxidAodL2-XXZhIYgkoAzfaK1R_mhIC40-DGHRM-0gfTNRiTOSS7mfn3ix9acwQPdgobFC82MnbLYs17jK10CFWXqGATM5rMgIEwb9jC0LE-YYdpyuLOvnKhRufzD_ruBaN8QVYhLAEA1WwByfeEEgNEnqPK6Mx5qWtXTm_7tjUUQC-CrT8R1LRrtjvRpKpID9Jpk9onV7r3ilzgjmKgbk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a784306-bbe7-4fe9-b636-069564a148929", "record_id": "flaws_cloudtrail:0000547:a8a784306-bbe7-4fe9-b636-069564a148929", "row_index": 547, "timestamp": "2018-04-17T19:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a784306-bbe7-4fe9-b636-069564a148929", "eventTime": "2018-04-17T19:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdda4c62-9760-444e-8656-8b8cd24ab376", "record_id": "flaws_cloudtrail:0000548:bdda4c62-9760-444e-8656-8b8cd24ab376", "row_index": 548, "timestamp": "2018-04-17T19:51:43Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdda4c62-9760-444e-8656-8b8cd24ab376", "eventTime": "2018-04-17T19:51:43Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aec2020-5c37-4e17-a726-42e6fea5dfe9", "record_id": "flaws_cloudtrail:0000549:6aec2020-5c37-4e17-a726-42e6fea5dfe9", "row_index": 549, "timestamp": "2018-04-17T19:51:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aec2020-5c37-4e17-a726-42e6fea5dfe9", "eventTime": "2018-04-17T19:51:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce645bd6-c4f2-4b8e-b218-20ff52992a8f", "record_id": "flaws_cloudtrail:0000550:ce645bd6-c4f2-4b8e-b218-20ff52992a8f", "row_index": 550, "timestamp": "2018-04-17T19:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce645bd6-c4f2-4b8e-b218-20ff52992a8f", "eventTime": "2018-04-17T19:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e81f8968-790a-44c6-87a0-9af5e583544", "record_id": "flaws_cloudtrail:0000551:e81f8968-790a-44c6-87a0-9af5e583544", "row_index": 551, "timestamp": "2018-04-17T19:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e81f8968-790a-44c6-87a0-9af5e583544", "eventTime": "2018-04-17T19:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3077d06-7cad-479e-add3-a0ad61b77380", "record_id": "flaws_cloudtrail:0000552:d3077d06-7cad-479e-add3-a0ad61b77380", "row_index": 552, "timestamp": "2018-04-17T19:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3077d06-7cad-479e-add3-a0ad61b77380", "eventTime": "2018-04-17T19:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: SsYr-UHN9PMZCxCiPglM9vVuhw8eTE8HqqwSmPZNtw3FiYHD8Lpo4DJjY44NGi5vf6B8N4FLD13dtXh3hFqDVo8dg4NEbMCTzbVZivbhivDZedaA4kYlJb6d7p2-b-cDmLN8VjSUK8b6qnwt5gVe9pHffup6mcej10VabZ6jK_OjyomcPLejEQYOaLfYb3xLleZ_q3NrlM88VZZYQDMy_NeiUCXDTLmRRGoZ0_QWfaO34Ugt6g2xIMPBXsyIq7WA0enuXFMpnaWsQwD6LNDqWf0NApM2T8xjgOTm7pQC_pGQnkbscubhuY56bXPEPQ1p3RLRJwZt3xxTOQER7foC3erQTwd_0oKdSb6PHr6vWG1lj1hWvR55YP2JhtBo_eWLmLGbEQuu1GsRbOxaqQ8lqPp-gGsig86fsl3-pSX_KsH83QAg5RpRomZ9WIb61yiAeLLrWVfqUlXhSFAVW6XY7SuERhgaAA_JWfKIo4OqHqiblQvYcQYkXP1--Mk5C5UMxpvhLNqk3qBKSZ7ZHCDnvn21pMSi_AilFZ2PxBVRx3N0G5ejAL7Eqiy-GofS5ar-24jkI5ieSkbXpAIj8Wph5B2sFhoT3CPTJ2sfgm45gXaf_f-lKu0DcuYd_ZpyiDS_4p3dBxbioYmBjIvbamAw3NbQ_xb_u2jo-SrrmmE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4132c27b-dca7-4b00-8857-48b25a51090a", "record_id": "flaws_cloudtrail:0000553:4132c27b-dca7-4b00-8857-48b25a51090a", "row_index": 553, "timestamp": "2018-04-17T19:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4132c27b-dca7-4b00-8857-48b25a51090a", "eventTime": "2018-04-17T19:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e66f7157-f4b5-4abc-9ad8-64cea5e550a0", "record_id": "flaws_cloudtrail:0000554:e66f7157-f4b5-4abc-9ad8-64cea5e550a0", "row_index": 554, "timestamp": "2018-04-17T19:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e66f7157-f4b5-4abc-9ad8-64cea5e550a0", "eventTime": "2018-04-17T19:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: d13TqdI125ZNGSRrpBHB5fIVTMAYLLklZtbSxuVMcOn1c41Ub7jXPGtCS92x0Q0e1qEAqvSoFATWv4BAfONdurYE2N1Oo8wBUogZqk1PdaAtc1x5LR9j8wKB0k644tRESU6BT8FkBykmUc31n0wCiD63e-6-x9JH3VkUUVQqeovrHdUG6Vatk-ZU4D1sRVomUAOOHJeEOfQg9SZfnHa6W_JMF_80H-hLFtHgnqGdRGvxFa15dfQtc6fbmsEba4gj7HFY8YM9E_at0H_IpHcjCLL0O-1X8Pmw6lwHcfX9Nfb7GE2_BOWCU19Kwg5Yl6mtduhbrPQodh08CKhfe5S-MpbI7J4qVE6thgg8X0LL0tigtlRkmx8h6plk-va3kuiXGs5Oko77sxDPyE6Pekxfv4glSItb8nWhp3K9wpb917efXdjYnROXQA1nsUHVdrpZRYjnnJ8ekAUL8p7tGdL2xY_bj8Ja00Ii5wK9G0dgtugbN9ArBY4MDrlyPkptL5DvlGJGBXaGuxZnk_l1-xkZ2rxkXkaXH4HZa2vvOWfjsjEhHFAeqBtHLNngIW7JJq1KH7Q2Uy_DDd11W9vxFAjYDF2KLdekGRluuablIG3F78kJk_eDnaSULuGU0322l1SSIcbesGrr_c_v5oCXMWgvMmTMQ7UMWRGU8g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea0eb1d-0aec-4c4f-8c83-85b4b00f5e45", "record_id": "flaws_cloudtrail:0000555:1ea0eb1d-0aec-4c4f-8c83-85b4b00f5e45", "row_index": 555, "timestamp": "2018-04-17T19:51:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea0eb1d-0aec-4c4f-8c83-85b4b00f5e45", "eventTime": "2018-04-17T19:51:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c233c6-80fc-4831-bbc0-40b0a7905b42", "record_id": "flaws_cloudtrail:0000556:31c233c6-80fc-4831-bbc0-40b0a7905b42", "row_index": 556, "timestamp": "2018-04-17T19:51:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c233c6-80fc-4831-bbc0-40b0a7905b42", "eventTime": "2018-04-17T19:51:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8213ef9a-4017-48f5-b11a-3dfa19412dec", "record_id": "flaws_cloudtrail:0000557:8213ef9a-4017-48f5-b11a-3dfa19412dec", "row_index": 557, "timestamp": "2018-04-17T19:51:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8213ef9a-4017-48f5-b11a-3dfa19412dec", "eventTime": "2018-04-17T19:51:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610e380c-eaa2-46da-98bd-90d0b19c78c0", "record_id": "flaws_cloudtrail:0000558:610e380c-eaa2-46da-98bd-90d0b19c78c0", "row_index": 558, "timestamp": "2018-04-17T19:51:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610e380c-eaa2-46da-98bd-90d0b19c78c0", "eventTime": "2018-04-17T19:51:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3b260105-bbe1-4a7f-8d8d-a95bfc631ab4", "record_id": "flaws_cloudtrail:0000559:d3b260105-bbe1-4a7f-8d8d-a95bfc631ab4", "row_index": 559, "timestamp": "2018-04-17T19:51:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3b260105-bbe1-4a7f-8d8d-a95bfc631ab4", "eventTime": "2018-04-17T19:51:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4a43283-290b-4f0e-9ce5-22dc96e6d7b9", "record_id": "flaws_cloudtrail:0000560:a4a43283-290b-4f0e-9ce5-22dc96e6d7b9", "row_index": 560, "timestamp": "2018-04-17T19:51:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4a43283-290b-4f0e-9ce5-22dc96e6d7b9", "eventTime": "2018-04-17T19:51:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7b8034-a7b4-43e6-bd9b-2f6d205bb49c", "record_id": "flaws_cloudtrail:0000561:ad7b8034-a7b4-43e6-bd9b-2f6d205bb49c", "row_index": 561, "timestamp": "2018-04-17T19:51:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1824, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7b8034-a7b4-43e6-bd9b-2f6d205bb49c", "eventTime": "2018-04-17T19:51:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: nOZ8DFeCCbLmQM4go1VMRTmmlWDcgQsxciZJKJNeoKKmHVGnPsRBEfP8-AMSKPHg0t5Xw_txym6kIiXwODEFXcJbVpkaH_HX9TQHp9Wf9fwgLw8cMkjnV5SDrKq2lb_GdJpe4ne1_BJjWccvTPvVNZPa67Lr8_nxW1n5pEEtdF64dXt8U0bytvX7zG60RVyc_pA1gg4MAOq2bb9f619B6DbEZ8o8yNjFdXkfAunQGjhicCla6Rr8ObBRRXp8LJp2-wJFJJvjo5qhe0XC7ZpOpM7iWq_M6c00hQT_-XojWs7hwheYVD7WfgwuG5hryn74JZwKqnpNnWRb-gQEydlBHfhygqdvB0gct6W47Q6p__16WbRzY2eKe-GdgMOfyDW_WdSy-XRCJmxs46P0nAGltug6N5Am7-EgEaoAbvH17yFdYngk8E3G3x9WosJ8Tl2ysK2UWAs1lCcejPFE0B7CwqpNu7rrVcvjrE3xhQlfvSHJ_ZuIt_XQLjc5Bv1PlemhstazdRK6s0FMq1PyZAauAykrgrtgxzP029TjOJvy390t1Q-8BubOOB2XRjFDFhnge-kjBcjzzMn45JiZN7NSscPCbJnoE_09v5EZaakFcM2kA1bDKdL-rxhb398UrBljN-qXiwOGeOjeW80gKR9fbUHX8RzDV5Rgqg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b05570-8ddd-42d0-ad39-4f99f8d53999", "record_id": "flaws_cloudtrail:0000562:b05570-8ddd-42d0-ad39-4f99f8d53999", "row_index": 562, "timestamp": "2018-04-17T19:51:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b05570-8ddd-42d0-ad39-4f99f8d53999", "eventTime": "2018-04-17T19:51:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff1a0ee-062b-4d29-9f65-92b57e27b85b", "record_id": "flaws_cloudtrail:0000563:bff1a0ee-062b-4d29-9f65-92b57e27b85b", "row_index": 563, "timestamp": "2018-04-17T19:51:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff1a0ee-062b-4d29-9f65-92b57e27b85b", "eventTime": "2018-04-17T19:51:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1d6ee10-bd8d-4cb8-af57-5b6b8ff67887", "record_id": "flaws_cloudtrail:0000564:f1d6ee10-bd8d-4cb8-af57-5b6b8ff67887", "row_index": 564, "timestamp": "2018-04-17T19:51:48Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1d6ee10-bd8d-4cb8-af57-5b6b8ff67887", "eventTime": "2018-04-17T19:51:48Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d627045d-1f80-4a6e-8de0-2f2f686e69ab", "record_id": "flaws_cloudtrail:0000565:0d627045d-1f80-4a6e-8de0-2f2f686e69ab", "row_index": 565, "timestamp": "2018-04-17T19:51:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d627045d-1f80-4a6e-8de0-2f2f686e69ab", "eventTime": "2018-04-17T19:51:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a067721-005f-4767-932c-fd36ea9219f9", "record_id": "flaws_cloudtrail:0000566:a6a067721-005f-4767-932c-fd36ea9219f9", "row_index": 566, "timestamp": "2018-04-17T19:51:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a067721-005f-4767-932c-fd36ea9219f9", "eventTime": "2018-04-17T19:51:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf68d935-ce45-41a2-9ec1-8aa017fee1bb", "record_id": "flaws_cloudtrail:0000567:bf68d935-ce45-41a2-9ec1-8aa017fee1bb", "row_index": 567, "timestamp": "2018-04-17T19:51:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf68d935-ce45-41a2-9ec1-8aa017fee1bb", "eventTime": "2018-04-17T19:51:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f713b4c5-f73f-4c0c-9172-f359652bef", "record_id": "flaws_cloudtrail:0000568:f713b4c5-f73f-4c0c-9172-f359652bef", "row_index": 568, "timestamp": "2018-04-17T19:51:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f713b4c5-f73f-4c0c-9172-f359652bef", "eventTime": "2018-04-17T19:51:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa760bb-e85e-44d8-97be-befb1c0e14b1", "record_id": "flaws_cloudtrail:0000569:cfa760bb-e85e-44d8-97be-befb1c0e14b1", "row_index": 569, "timestamp": "2018-04-17T19:51:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa760bb-e85e-44d8-97be-befb1c0e14b1", "eventTime": "2018-04-17T19:51:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82593ad0-e796-4d73-aec0-e2c796a3404a", "record_id": "flaws_cloudtrail:0000570:82593ad0-e796-4d73-aec0-e2c796a3404a", "row_index": 570, "timestamp": "2018-04-17T19:51:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82593ad0-e796-4d73-aec0-e2c796a3404a", "eventTime": "2018-04-17T19:51:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd42b41a-f86b-47de-b3c8-7ebafdd6e16f", "record_id": "flaws_cloudtrail:0000571:fd42b41a-f86b-47de-b3c8-7ebafdd6e16f", "row_index": 571, "timestamp": "2018-04-17T19:51:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd42b41a-f86b-47de-b3c8-7ebafdd6e16f", "eventTime": "2018-04-17T19:51:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CKB0cy6r1CVQglDXKAaKs2xKn5qOCJErSWM2S18PAEkl-X528ZqHrqBYKDNtFJkDEc8Htwjht5GhGfpHPqHH52riy6aeLh8Zw18-rv0874ByYAfX6CXpC1U3Tuu8kjViHvd2zXlr6EzpQufZATszmcfOAdBkXzlDwrzq2zzvehfs2NzeclKZRZXAjoX5fHCIclhXTFKbvOPgxlkShMB87h84HmWFiBy4VOFALIxDOPwy-jemzrgjKAl24uC01NxJf7jaabOM8-L0VhroN2HZfjQjZNBnasfJcclealPX68JZ8PO1Wje3gZaDcPI00TGzRCE3gUu6kryANSyHqY54uBjyQcbYjoO_fu4IkEE5XpctuSXXmy2eUif-wmOH7sSmoPVllm5nXCPTBR6mAQTuXaVg8HGVPQMI_JbcYhvMkrOy6xTnHI3fLQhA9nILosAu7asvqSUbh2t85o9sEHo8XLQn93URUDsIxhewVVnQ_IWAlA9tT6vM71WvIjboFvxsVuKNRIEifAEPBtitxkZZ42dsmQqwAnEbUKUSHIIqtE_6adPvkkUesxLlWb8uVDKKIkkHSFaRFNLqOzQQDi4xdGsEYewT4MYG9Vq9DI0cX6z_42Pe-kDwYi5ElQ7xBUD_f0BjHbMEMaQJFdnpF0hgCmnyq_B1p1V2Rw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40894e-6a3a-4139-9fda-0dc60a2083cf", "record_id": "flaws_cloudtrail:0000572:40894e-6a3a-4139-9fda-0dc60a2083cf", "row_index": 572, "timestamp": "2018-04-17T19:51:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40894e-6a3a-4139-9fda-0dc60a2083cf", "eventTime": "2018-04-17T19:51:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "594ec210-38c5-408e-b64e-6905f7002599", "record_id": "flaws_cloudtrail:0000573:594ec210-38c5-408e-b64e-6905f7002599", "row_index": 573, "timestamp": "2018-04-17T19:51:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "594ec210-38c5-408e-b64e-6905f7002599", "eventTime": "2018-04-17T19:51:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ae7f058-f857-4ef2-80b7-7d326173a83d", "record_id": "flaws_cloudtrail:0000574:9ae7f058-f857-4ef2-80b7-7d326173a83d", "row_index": 574, "timestamp": "2018-04-17T19:51:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ae7f058-f857-4ef2-80b7-7d326173a83d", "eventTime": "2018-04-17T19:51:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea11fc75-d46c-4e5e-8fc7-61b13896e48c", "record_id": "flaws_cloudtrail:0000575:ea11fc75-d46c-4e5e-8fc7-61b13896e48c", "row_index": 575, "timestamp": "2018-04-17T19:51:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea11fc75-d46c-4e5e-8fc7-61b13896e48c", "eventTime": "2018-04-17T19:51:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a161eab9-8ca2-4db9-94c3-00b2622c8274", "record_id": "flaws_cloudtrail:0000576:a161eab9-8ca2-4db9-94c3-00b2622c8274", "row_index": 576, "timestamp": "2018-04-17T19:51:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a161eab9-8ca2-4db9-94c3-00b2622c8274", "eventTime": "2018-04-17T19:51:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8beea162-50b2-4d2d-9300-8c3431abc652", "record_id": "flaws_cloudtrail:0000577:8beea162-50b2-4d2d-9300-8c3431abc652", "row_index": 577, "timestamp": "2018-04-17T19:51:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8beea162-50b2-4d2d-9300-8c3431abc652", "eventTime": "2018-04-17T19:51:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d31d3d6-fbe2-4ed4-a8cb-6e55092f93a2", "record_id": "flaws_cloudtrail:0000578:9d31d3d6-fbe2-4ed4-a8cb-6e55092f93a2", "row_index": 578, "timestamp": "2018-04-17T19:51:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d31d3d6-fbe2-4ed4-a8cb-6e55092f93a2", "eventTime": "2018-04-17T19:51:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7344fa9b-1812-4ba7-8836-637a9ed17b7e", "record_id": "flaws_cloudtrail:0000579:7344fa9b-1812-4ba7-8836-637a9ed17b7e", "row_index": 579, "timestamp": "2018-04-17T19:51:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7344fa9b-1812-4ba7-8836-637a9ed17b7e", "eventTime": "2018-04-17T19:51:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "573d2e13-c372-4571-ae7b-4a56c3dc5159", "record_id": "flaws_cloudtrail:0000580:573d2e13-c372-4571-ae7b-4a56c3dc5159", "row_index": 580, "timestamp": "2018-04-17T19:51:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "573d2e13-c372-4571-ae7b-4a56c3dc5159", "eventTime": "2018-04-17T19:51:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZF3ugLbuNqvf9AMwKX_ZUxmPCOfo8coC6ES2zc8DaUbsd6Dxw1rXd4m5hIQ7_wWaHCIQF7h1YOgZBATJ_cvyCHzPkp4S3hw_8iZegl_00WALAgTBghc2PltTN87YTQJftfiwsLdkMWm3SQ8OrhnPzS8K70Xd8FZ6xhDmpStrsWD0yfn_kWfve8MAXDJWDMjUqyY93t8BufFwMuVS837bSkqxyuHzzO712dkQUVkg_ZfkNjmYEzuyiw050O-SWHkXfKR8Mxb1FhKicMzsE4LT5fmDydQDZTia3SVLOLXsv3xfIjAAyEaKxIK2NkvdR5wwedtktBrFDtE9YW8JfFoIO2Dv9bjVQzUP1qVc8KbWaQZJjssJz81GqXB_rQlcJEVjMOo0R96EOr4mdVPVUjcteE94M2woEp0-w3Jdyjh8FrUNiYxO6LviVDzletaSa5SjJgaR0H6DIDSMK021BSg45C0Rr403dIivfsy6abLA1JbMhENCHtUd8PoaUrWCxf84YbCNze7dOTvQPygWinPnYwLaJiwOw51lPlOuQq0quwFKskCF9yFifP4Q087ZXrzZFXiVS4C06YlaPJd-g3KvDGFmCiYLomIvlFITNi-39WwfA20EfhHJgdkGpRWn5_kI-wnqTe9QVEPaSxwIks3YO9dShwtBwcuXIJJ8ONM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6f1758-9ae0-4550-86e0-6ce8811d2156", "record_id": "flaws_cloudtrail:0000581:cf6f1758-9ae0-4550-86e0-6ce8811d2156", "row_index": 581, "timestamp": "2018-04-17T19:51:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6f1758-9ae0-4550-86e0-6ce8811d2156", "eventTime": "2018-04-17T19:51:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e9b034e-cb58-4365-aa10-eb3c01841ead", "record_id": "flaws_cloudtrail:0000582:5e9b034e-cb58-4365-aa10-eb3c01841ead", "row_index": 582, "timestamp": "2018-04-17T19:51:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e9b034e-cb58-4365-aa10-eb3c01841ead", "eventTime": "2018-04-17T19:51:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa5bfe5-8415-4b15-99c5-40cd0cdc452e", "record_id": "flaws_cloudtrail:0000583:8aa5bfe5-8415-4b15-99c5-40cd0cdc452e", "row_index": 583, "timestamp": "2018-04-17T19:51:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa5bfe5-8415-4b15-99c5-40cd0cdc452e", "eventTime": "2018-04-17T19:51:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebf1de35-c0a0-4518-9505-578184ef23af", "record_id": "flaws_cloudtrail:0000584:ebf1de35-c0a0-4518-9505-578184ef23af", "row_index": 584, "timestamp": "2018-04-17T19:51:54Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebf1de35-c0a0-4518-9505-578184ef23af", "eventTime": "2018-04-17T19:51:54Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ecb324c-a550-492c-878b-8b3a2d8f953b", "record_id": "flaws_cloudtrail:0000585:3ecb324c-a550-492c-878b-8b3a2d8f953b", "row_index": 585, "timestamp": "2018-04-17T19:51:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ecb324c-a550-492c-878b-8b3a2d8f953b", "eventTime": "2018-04-17T19:51:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f1d6c4-5d0b-4789-b722-cd3bac03dddc", "record_id": "flaws_cloudtrail:0000586:a5f1d6c4-5d0b-4789-b722-cd3bac03dddc", "row_index": 586, "timestamp": "2018-04-17T19:51:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f1d6c4-5d0b-4789-b722-cd3bac03dddc", "eventTime": "2018-04-17T19:51:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c935a1d-9b93-4a89-a100-f7d9a2a5319a", "record_id": "flaws_cloudtrail:0000587:0c935a1d-9b93-4a89-a100-f7d9a2a5319a", "row_index": 587, "timestamp": "2018-04-17T19:51:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c935a1d-9b93-4a89-a100-f7d9a2a5319a", "eventTime": "2018-04-17T19:51:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b775bdd-6199-4dc5-bf50-0fedb132738c1", "record_id": "flaws_cloudtrail:0000588:3b775bdd-6199-4dc5-bf50-0fedb132738c1", "row_index": 588, "timestamp": "2018-04-17T19:51:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b775bdd-6199-4dc5-bf50-0fedb132738c1", "eventTime": "2018-04-17T19:51:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab0f60b-17e1-4ca4-943e-f268da918c1a", "record_id": "flaws_cloudtrail:0000589:0ab0f60b-17e1-4ca4-943e-f268da918c1a", "row_index": 589, "timestamp": "2018-04-17T19:51:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab0f60b-17e1-4ca4-943e-f268da918c1a", "eventTime": "2018-04-17T19:51:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29099f-e392-405d-8f48-4fa97b96d026", "record_id": "flaws_cloudtrail:0000590:29099f-e392-405d-8f48-4fa97b96d026", "row_index": 590, "timestamp": "2018-04-17T19:51:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1835, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29099f-e392-405d-8f48-4fa97b96d026", "eventTime": "2018-04-17T19:51:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zMd1AG8XJ6QEYXntror1jcqRbXRFBs49Vcowvtnyaind5FZr-H7HZhcUdQLaXU033hz82uk3mMRyqBY68mmgGAjZLPDmxCacDv28eSVNqzNHAyy7OfZm1PVEv-gQ87-TgyNiWnIH0q5EXRIo4fXrLaK6-9kQ4pHvugkNv_B6JHtL6GtGZfwMdIqd-0xMlIEaQ-s2kPXinGV88xu6nv4mFMSx9LYVRRSIBq0pQd391XYZ4wTlsj7C1dfdMpD_SWAyBlD3pK6GDPI88AXQ3xnzgvWRFmA7ap8bwUHTAm4zyEiVwlqL23ZznRhcA5M3uMA_sOglx6OMv_vQXD6QX6Yy4YxhDNuaL9CyffDq6A_FWJU6KgH4X9HkGVxHk1vpx0c2AXjhz82Al2BNmbQzM2CeMAk1kKBOs5tmEvOK3Y3coApo_wv5c3XmDKUQNyt4-kQOixZU6xxtkqDTFFxxhl_OaMKvraSlaJzMuTnd6sfDbtf29yRXW6mwonn4CA-pdGkzSj2iLkWYxJ5plA5kNsuMeUZK20brsqYufKrmeuR0CHY020zC5bPQYUjyFGO1OX8mLzDi9Urs9eLZrXL5hSX9gosHdfKDyTOJZlmEFw16YMOgakyf7nX12_hwFFiTalrcQcEPEeXFMI7uTVBjqRKTKeJjBaHO1gMV9dJFEdQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7ec9d86-e939-4b7e-a0ef-1fef5dadb9fd", "record_id": "flaws_cloudtrail:0000591:f7ec9d86-e939-4b7e-a0ef-1fef5dadb9fd", "row_index": 591, "timestamp": "2018-04-17T19:51:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7ec9d86-e939-4b7e-a0ef-1fef5dadb9fd", "eventTime": "2018-04-17T19:51:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IKMkitOBgcCkABrbCQ5Jmt5ai6RhpRZNRW9a_-1AqQrgRy6EMG-D_kX2GfTI7DpKPuFSm-5ApfuBmXl2D2__q-6ByapwGKhFV6DucrJXKMYK8EKQSbYt1mzWdXyEA9J_ArB30BXYe_we4V1Ql_LTxb5gy85ssxnDECxqGVBmLxuVvTGByL0cZAe20oN0Bi16dkgP5SKOqfrZhGbhK340Qdloy-885KG5DbhGrTyvvinHOmDUL4lCSfZeEFvAj8jKKhkSEVX9stw38M-xeAm6iPp60eolRHL-08yEr547fOJHF67dVzhWl5DpLodK2tiaqPBojVeG4QVd3JIBMfd28HLrMbImgZ8TdXXvaU_70d_BFK8fAEfqS0m-s8nDQ1BSPTriZ-OIWIaEVo0QrDAirU64pQg3Vs609ngmqxEfoWezNBZZF9R11O0vvTX8O-ZbLVbkVp8RAcEJKKOcg7nvXkQIZ1nGNH2aAxlzjbmfNbGMoO5wORcBvx_WJmZvQno6cdeqDRQLzlsFrDJqnlujK1wSL2w6ik-HO2_3vk7JKAvMuXJmU2gNY4Qaz2YKGowRussgqwYvjPod7lZ72t-wh7_U8U5O0bVaaNlRckZ7oaYF6Xz9PrFBqVsU9HLQqIjU1RGVvHUWU6VRfGIFcBqprzMcn_wy5sHDSw4g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38e809e-8c24-41f5-ab74-b63f77db13bd", "record_id": "flaws_cloudtrail:0000592:c38e809e-8c24-41f5-ab74-b63f77db13bd", "row_index": 592, "timestamp": "2018-04-17T19:51:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38e809e-8c24-41f5-ab74-b63f77db13bd", "eventTime": "2018-04-17T19:51:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f1360f1-e348-4685-93fa-8c2e3514bcc0", "record_id": "flaws_cloudtrail:0000593:3f1360f1-e348-4685-93fa-8c2e3514bcc0", "row_index": 593, "timestamp": "2018-04-17T19:51:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f1360f1-e348-4685-93fa-8c2e3514bcc0", "eventTime": "2018-04-17T19:51:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c782f207-7016-4365-90c5-2be4d309124c8", "record_id": "flaws_cloudtrail:0000594:c782f207-7016-4365-90c5-2be4d309124c8", "row_index": 594, "timestamp": "2018-04-17T19:51:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c782f207-7016-4365-90c5-2be4d309124c8", "eventTime": "2018-04-17T19:51:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "306def77-6e57-4996-a83a-c39ba0824d74", "record_id": "flaws_cloudtrail:0000595:306def77-6e57-4996-a83a-c39ba0824d74", "row_index": 595, "timestamp": "2018-04-17T19:51:57Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "306def77-6e57-4996-a83a-c39ba0824d74", "eventTime": "2018-04-17T19:51:57Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9876f39-a722-47f4-b038-ba72649b1a04", "record_id": "flaws_cloudtrail:0000596:c9876f39-a722-47f4-b038-ba72649b1a04", "row_index": 596, "timestamp": "2018-04-17T19:51:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9876f39-a722-47f4-b038-ba72649b1a04", "eventTime": "2018-04-17T19:51:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16c3e83-a33d-450d-9c80-926188b4a80f4", "record_id": "flaws_cloudtrail:0000597:f16c3e83-a33d-450d-9c80-926188b4a80f4", "row_index": 597, "timestamp": "2018-04-17T19:51:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16c3e83-a33d-450d-9c80-926188b4a80f4", "eventTime": "2018-04-17T19:51:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d6cfdf-4a41-42b2-91eb-7f1b7f461bb8", "record_id": "flaws_cloudtrail:0000598:42d6cfdf-4a41-42b2-91eb-7f1b7f461bb8", "row_index": 598, "timestamp": "2018-04-17T19:51:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d6cfdf-4a41-42b2-91eb-7f1b7f461bb8", "eventTime": "2018-04-17T19:51:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0529f156-e041-4202-bd4e-2713caf491d4", "record_id": "flaws_cloudtrail:0000599:0529f156-e041-4202-bd4e-2713caf491d4", "row_index": 599, "timestamp": "2018-04-17T19:51:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0529f156-e041-4202-bd4e-2713caf491d4", "eventTime": "2018-04-17T19:51:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200c857b-ca8e-4ba4-9761-0b52ef1f5da4", "record_id": "flaws_cloudtrail:0000600:200c857b-ca8e-4ba4-9761-0b52ef1f5da4", "row_index": 600, "timestamp": "2018-04-17T19:51:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200c857b-ca8e-4ba4-9761-0b52ef1f5da4", "eventTime": "2018-04-17T19:51:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: a8Rpn_agnXPsDxTwUuLhaqSCH900hTsF4Igk1_jHmqefLIDrTPxCrH62f9F7bPTR6gbuJumpjrQhbkRN0PYDPQDZVLXjW25NeNi0Vt5sTM2mVZfyOmD1FVfc-wDelSF8tZe2jNnEEqxvd5mkXVNdgNgTsSBKYAbJqNhfoIF0i8Y_c4K53g0DwRVKx5_foC75TCCB0mqQIi909bxxqi7NFtRhkHArL_MJnp3xEEGJWic9Ac5X_BnGkfGRHpH-4FVApZolBH5pgZOsSRMQiBz-ofNG9Y8GCtaUPq9QGU-yTwocVMpTxkjmvyiL9V8lMiVIi4xhRa7zOZIej_w5lxWZ0mYHyWZiWdWgUYlm3Y0uoOMQO1B7TF-_kupCh65EJwmCyhnFRN95UqtVKosXFgcZp8UVqP9LWVCrVFYvbYTN7h7myy5PCc0VS9wueCSOe1Ky-tNB1jAAQbQ-82arTeKqHJ3M_vUMQ5RabZxp6sYXR4OXbW-ypjEPuU4APolCI-1ZpowB-0fOPR--g9Ta1RMpiUn4EY7ItdvxFab3Fr5gG2FV6C8W7RLdd54-e4RWMCxR2L5PP_L2k2lP5H0BGFmwI6QdzMqhsoHmYiFKJSRntrRcuiRzHxsCJ-DcLYzyMbUd4wDOWX6Hn1uOLXI5qrYNKpLeFAbNr2DrwQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32bd0b4-008b-4941-bac0-cf6a7f14e456", "record_id": "flaws_cloudtrail:0000601:b32bd0b4-008b-4941-bac0-cf6a7f14e456", "row_index": 601, "timestamp": "2018-04-17T19:51:59Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32bd0b4-008b-4941-bac0-cf6a7f14e456", "eventTime": "2018-04-17T19:51:59Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "518a949a-adb6-4d4b-b841-58ccdc4b44a0", "record_id": "flaws_cloudtrail:0000602:518a949a-adb6-4d4b-b841-58ccdc4b44a0", "row_index": 602, "timestamp": "2018-04-17T19:51:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "518a949a-adb6-4d4b-b841-58ccdc4b44a0", "eventTime": "2018-04-17T19:51:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce3c8832-b878-442c-b546-a24c586f4fcd", "record_id": "flaws_cloudtrail:0000603:ce3c8832-b878-442c-b546-a24c586f4fcd", "row_index": 603, "timestamp": "2018-04-17T19:52:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce3c8832-b878-442c-b546-a24c586f4fcd", "eventTime": "2018-04-17T19:52:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd8e8953-dd97-49fb-b9ab-8551c90d2092", "record_id": "flaws_cloudtrail:0000604:bd8e8953-dd97-49fb-b9ab-8551c90d2092", "row_index": 604, "timestamp": "2018-04-17T19:52:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd8e8953-dd97-49fb-b9ab-8551c90d2092", "eventTime": "2018-04-17T19:52:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6d29f6a-7b16-405b-a7dc-fb7e45b72ce8", "record_id": "flaws_cloudtrail:0000605:e6d29f6a-7b16-405b-a7dc-fb7e45b72ce8", "row_index": 605, "timestamp": "2018-04-17T19:52:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6d29f6a-7b16-405b-a7dc-fb7e45b72ce8", "eventTime": "2018-04-17T19:52:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}