Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08834-6a4a-467b-9ad1-e41d6b1f1343", "record_id": "flaws_cloudtrail:0000000:08834-6a4a-467b-9ad1-e41d6b1f1343", "row_index": 0, "timestamp": "2018-12-19T23:13:19Z", "event_type": "ListDirectories", "event_source": "clouddirectory.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08834-6a4a-467b-9ad1-e41d6b1f1343", "eventTime": "2018-12-19T23:13:19Z", "eventName": "ListDirectories", "eventSource": "clouddirectory.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f86574-faeb-436f-83d9-1c53fc818a74", "record_id": "flaws_cloudtrail:0000001:0f86574-faeb-436f-83d9-1c53fc818a74", "row_index": 1, "timestamp": "2018-12-19T23:13:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f86574-faeb-436f-83d9-1c53fc818a74", "eventTime": "2018-12-19T23:13:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49d2102-6c64-4049-9be0-10bfd88e13fc", "record_id": "flaws_cloudtrail:0000002:a49d2102-6c64-4049-9be0-10bfd88e13fc", "row_index": 2, "timestamp": "2018-12-19T23:13:20Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49d2102-6c64-4049-9be0-10bfd88e13fc", "eventTime": "2018-12-19T23:13:20Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43bed0d-7f91-4ba5-a7c3-232ccc8a44f4", "record_id": "flaws_cloudtrail:0000003:a43bed0d-7f91-4ba5-a7c3-232ccc8a44f4", "row_index": 3, "timestamp": "2018-12-19T23:13:20Z", "event_type": "ListExports", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43bed0d-7f91-4ba5-a7c3-232ccc8a44f4", "eventTime": "2018-12-19T23:13:20Z", "eventName": "ListExports", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:ListExports", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25b0226d-9271-4173-8f53-700c40ce2d95", "record_id": "flaws_cloudtrail:0000004:25b0226d-9271-4173-8f53-700c40ce2d95", "row_index": 4, "timestamp": "2018-12-19T23:13:20Z", "event_type": "DescribeAccountLimits", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25b0226d-9271-4173-8f53-700c40ce2d95", "eventTime": "2018-12-19T23:13:20Z", "eventName": "DescribeAccountLimits", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudformation:DescribeAccountLimits", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c413102cd-b802-4de1-a0ac-a19f7cbba8e1", "record_id": "flaws_cloudtrail:0000005:c413102cd-b802-4de1-a0ac-a19f7cbba8e1", "row_index": 5, "timestamp": "2018-12-19T23:13:21Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c413102cd-b802-4de1-a0ac-a19f7cbba8e1", "eventTime": "2018-12-19T23:13:21Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e03c5106-31c2-458f-b859-93a175ef8a5f", "record_id": "flaws_cloudtrail:0000006:e03c5106-31c2-458f-b859-93a175ef8a5f", "row_index": 6, "timestamp": "2018-12-19T23:13:21Z", "event_type": "ListCloudFrontOriginAccessIdentities", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e03c5106-31c2-458f-b859-93a175ef8a5f", "eventTime": "2018-12-19T23:13:21Z", "eventName": "ListCloudFrontOriginAccessIdentities", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab95789-28aa-4d8a-9424-69a49843ad27", "record_id": "flaws_cloudtrail:0000007:6ab95789-28aa-4d8a-9424-69a49843ad27", "row_index": 7, "timestamp": "2018-12-19T23:13:22Z", "event_type": "ListHapgs", "event_source": "cloudhsm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab95789-28aa-4d8a-9424-69a49843ad27", "eventTime": "2018-12-19T23:13:22Z", "eventName": "ListHapgs", "eventSource": "cloudhsm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "CloudHsmServiceException", "errorMessage": "This service is unavailable.  Please see https://aws.amazon.com/cloudhsm/faqs-classic/", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23a9033a-5c32-4a1f-bee5-be7a916e982a", "record_id": "flaws_cloudtrail:0000008:23a9033a-5c32-4a1f-bee5-be7a916e982a", "row_index": 8, "timestamp": "2018-12-19T23:13:22Z", "event_type": "ListHsms", "event_source": "cloudhsm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23a9033a-5c32-4a1f-bee5-be7a916e982a", "eventTime": "2018-12-19T23:13:22Z", "eventName": "ListHsms", "eventSource": "cloudhsm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "CloudHsmServiceException", "errorMessage": "This service is unavailable.  Please see https://aws.amazon.com/cloudhsm/faqs-classic/", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1923f44-d5b5-4a95-b12b-66f3b3d59a93", "record_id": "flaws_cloudtrail:0000009:f1923f44-d5b5-4a95-b12b-66f3b3d59a93", "row_index": 9, "timestamp": "2018-12-19T23:13:23Z", "event_type": "ListLunaClients", "event_source": "cloudhsm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1923f44-d5b5-4a95-b12b-66f3b3d59a93", "eventTime": "2018-12-19T23:13:23Z", "eventName": "ListLunaClients", "eventSource": "cloudhsm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "CloudHsmServiceException", "errorMessage": "This service is unavailable.  Please see https://aws.amazon.com/cloudhsm/faqs-classic/", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbd13dba-89ba-45cf-ba28-e9eee4d2ee09", "record_id": "flaws_cloudtrail:0000010:bbd13dba-89ba-45cf-ba28-e9eee4d2ee09", "row_index": 10, "timestamp": "2018-12-19T23:13:24Z", "event_type": "ListDomainNames", "event_source": "cloudsearch.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbd13dba-89ba-45cf-ba28-e9eee4d2ee09", "eventTime": "2018-12-19T23:13:24Z", "eventName": "ListDomainNames", "eventSource": "cloudsearch.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudsearch:ListDomainNames on resource: arn:aws:cloudsearch:us-east-1:811596193553:domain/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c12fb68-87cb-44e5-936a-1bad493d2af8", "record_id": "flaws_cloudtrail:0000011:7c12fb68-87cb-44e5-936a-1bad493d2af8", "row_index": 11, "timestamp": "2018-12-19T23:13:24Z", "event_type": "DescribeDomains", "event_source": "cloudsearch.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c12fb68-87cb-44e5-936a-1bad493d2af8", "eventTime": "2018-12-19T23:13:24Z", "eventName": "DescribeDomains", "eventSource": "cloudsearch.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9c293082-82a0-4241-8a61-2356da65d135", "record_id": "flaws_cloudtrail:0000012:c9c293082-82a0-4241-8a61-2356da65d135", "row_index": 12, "timestamp": "2018-12-19T23:13:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9c293082-82a0-4241-8a61-2356da65d135", "eventTime": "2018-12-19T23:13:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03284a2e-e059-4bd4-b70c-786b43403691", "record_id": "flaws_cloudtrail:0000013:03284a2e-e059-4bd4-b70c-786b43403691", "row_index": 13, "timestamp": "2018-12-19T23:13:25Z", "event_type": "ListPublicKeys", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03284a2e-e059-4bd4-b70c-786b43403691", "eventTime": "2018-12-19T23:13:25Z", "eventName": "ListPublicKeys", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: cloudtrail:ListPublicKeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "674b0c9c-550d-4b47-b001-79dec434de01", "record_id": "flaws_cloudtrail:0000014:674b0c9c-550d-4b47-b001-79dec434de01", "row_index": 14, "timestamp": "2018-12-19T23:13:26Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "674b0c9c-550d-4b47-b001-79dec434de01", "eventTime": "2018-12-19T23:13:26Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107c74c5-71fb-45dd-9943-21be7c78fc24", "record_id": "flaws_cloudtrail:0000015:107c74c5-71fb-45dd-9943-21be7c78fc24", "row_index": 15, "timestamp": "2018-12-19T23:13:26Z", "event_type": "DescribeAlarmHistory", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107c74c5-71fb-45dd-9943-21be7c78fc24", "eventTime": "2018-12-19T23:13:26Z", "eventName": "DescribeAlarmHistory", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43cc8e3-02ec-4f34-ae6c-7b7eb716351c", "record_id": "flaws_cloudtrail:0000016:b43cc8e3-02ec-4f34-ae6c-7b7eb716351c", "row_index": 16, "timestamp": "2018-12-19T23:13:26Z", "event_type": "ListBuilds", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43cc8e3-02ec-4f34-ae6c-7b7eb716351c", "eventTime": "2018-12-19T23:13:26Z", "eventName": "ListBuilds", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: codebuild:ListBuilds", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0dfb8fc-636c-4325-a561-68e6684affcd", "record_id": "flaws_cloudtrail:0000017:a0dfb8fc-636c-4325-a561-68e6684affcd", "row_index": 17, "timestamp": "2018-12-19T23:13:27Z", "event_type": "ListCuratedEnvironmentImages", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0dfb8fc-636c-4325-a561-68e6684affcd", "eventTime": "2018-12-19T23:13:27Z", "eventName": "ListCuratedEnvironmentImages", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: codebuild:ListCuratedEnvironmentImages", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a99276e3-0561-4e76-94f3-1c8e726cfd2d", "record_id": "flaws_cloudtrail:0000018:a99276e3-0561-4e76-94f3-1c8e726cfd2d", "row_index": 18, "timestamp": "2018-12-19T23:13:27Z", "event_type": "ListProjects", "event_source": "codebuild.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a99276e3-0561-4e76-94f3-1c8e726cfd2d", "eventTime": "2018-12-19T23:13:27Z", "eventName": "ListProjects", "eventSource": "codebuild.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"awsActId": "811596193553", "payerId": ":1:d2:bcd3:pid12:396373515955ee", "userArn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f951d6b-ce87-4ad1-a642-7c87d77492", "record_id": "flaws_cloudtrail:0000019:6f951d6b-ce87-4ad1-a642-7c87d77492", "row_index": 19, "timestamp": "2018-12-19T23:13:28Z", "event_type": "ListDeployments", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f951d6b-ce87-4ad1-a642-7c87d77492", "eventTime": "2018-12-19T23:13:28Z", "eventName": "ListDeployments", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e185fd5-7401-422b-9e93-7e6d24355", "record_id": "flaws_cloudtrail:0000020:6e185fd5-7401-422b-9e93-7e6d24355", "row_index": 20, "timestamp": "2018-12-19T23:13:28Z", "event_type": "ListApplications", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e185fd5-7401-422b-9e93-7e6d24355", "eventTime": "2018-12-19T23:13:28Z", "eventName": "ListApplications", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2527c9fa-2f09-4710-bdd5-43d8e98149ed", "record_id": "flaws_cloudtrail:0000021:2527c9fa-2f09-4710-bdd5-43d8e98149ed", "row_index": 21, "timestamp": "2018-12-19T23:13:28Z", "event_type": "ListRepositories", "event_source": "codecommit.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2527c9fa-2f09-4710-bdd5-43d8e98149ed", "eventTime": "2018-12-19T23:13:28Z", "eventName": "ListRepositories", "eventSource": "codecommit.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cbfc0b6-6e6e-4fb2-ac87-eac2c3c746845", "record_id": "flaws_cloudtrail:0000022:2cbfc0b6-6e6e-4fb2-ac87-eac2c3c746845", "row_index": 22, "timestamp": "2018-12-19T23:13:29Z", "event_type": "ListDeploymentConfigs", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cbfc0b6-6e6e-4fb2-ac87-eac2c3c746845", "eventTime": "2018-12-19T23:13:29Z", "eventName": "ListDeploymentConfigs", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d359a9c4-b8ea-4345-85e3-cc0e023d4c3a", "record_id": "flaws_cloudtrail:0000023:d359a9c4-b8ea-4345-85e3-cc0e023d4c3a", "row_index": 23, "timestamp": "2018-12-19T23:13:29Z", "event_type": "ListGitHubAccountTokenNames", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d359a9c4-b8ea-4345-85e3-cc0e023d4c3a", "eventTime": "2018-12-19T23:13:29Z", "eventName": "ListGitHubAccountTokenNames", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"tokenNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "939409f-20cc-4d3e-ba22-ecead4f826d7", "record_id": "flaws_cloudtrail:0000024:939409f-20cc-4d3e-ba22-ecead4f826d7", "row_index": 24, "timestamp": "2018-12-19T23:13:29Z", "event_type": "ListOnPremisesInstances", "event_source": "codedeploy.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "939409f-20cc-4d3e-ba22-ecead4f826d7", "eventTime": "2018-12-19T23:13:29Z", "eventName": "ListOnPremisesInstances", "eventSource": "codedeploy.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d8226b-bb2a-410d-ba4e-5d93a5257e7e", "record_id": "flaws_cloudtrail:0000025:83d8226b-bb2a-410d-ba4e-5d93a5257e7e", "row_index": 25, "timestamp": "2018-12-19T23:13:29Z", "event_type": "ListPipelines", "event_source": "codepipeline.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d8226b-bb2a-410d-ba4e-5d93a5257e7e", "eventTime": "2018-12-19T23:13:29Z", "eventName": "ListPipelines", "eventSource": "codepipeline.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506eeecb-948c-4fa4-91ee-00e318c46da0", "record_id": "flaws_cloudtrail:0000026:506eeecb-948c-4fa4-91ee-00e318c46da0", "row_index": 26, "timestamp": "2018-12-19T23:13:30Z", "event_type": "ListProjects", "event_source": "codestar.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506eeecb-948c-4fa4-91ee-00e318c46da0", "eventTime": "2018-12-19T23:13:30Z", "eventName": "ListProjects", "eventSource": "codestar.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a856058c-77d9-432f-aa56-5a529279feb", "record_id": "flaws_cloudtrail:0000027:9a856058c-77d9-432f-aa56-5a529279feb", "row_index": 27, "timestamp": "2018-12-19T23:13:30Z", "event_type": "ListUserProfiles", "event_source": "codestar.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a856058c-77d9-432f-aa56-5a529279feb", "eventTime": "2018-12-19T23:13:30Z", "eventName": "ListUserProfiles", "eventSource": "codestar.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d855a272-fdfb-4bed-9dbc-8b71a12295fd", "record_id": "flaws_cloudtrail:0000028:d855a272-fdfb-4bed-9dbc-8b71a12295fd", "row_index": 28, "timestamp": "2018-12-19T23:13:30Z", "event_type": "ListIdentityPools", "event_source": "cognito-identity.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d855a272-fdfb-4bed-9dbc-8b71a12295fd", "eventTime": "2018-12-19T23:13:30Z", "eventName": "ListIdentityPools", "eventSource": "cognito-identity.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293021f87-e3cf-406b-a3e7-0e6a05a1cc5f", "record_id": "flaws_cloudtrail:0000029:293021f87-e3cf-406b-a3e7-0e6a05a1cc5f", "row_index": 29, "timestamp": "2018-12-19T23:13:31Z", "event_type": "ListIdentityPoolUsage", "event_source": "cognito-sync.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293021f87-e3cf-406b-a3e7-0e6a05a1cc5f", "eventTime": "2018-12-19T23:13:31Z", "eventName": "ListIdentityPoolUsage", "eventSource": "cognito-sync.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f267510-1d9b-458e-a1e0-95d736b8d85e", "record_id": "flaws_cloudtrail:0000030:f267510-1d9b-458e-a1e0-95d736b8d85e", "row_index": 30, "timestamp": "2018-12-19T23:13:31Z", "event_type": "ListUserPools", "event_source": "cognito-idp.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f267510-1d9b-458e-a1e0-95d736b8d85e", "eventTime": "2018-12-19T23:13:31Z", "eventName": "ListUserPools", "eventSource": "cognito-idp.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed523749d-2284-4964-8c7e-0ca433054b87", "record_id": "flaws_cloudtrail:0000031:ed523749d-2284-4964-8c7e-0ca433054b87", "row_index": 31, "timestamp": "2018-12-19T23:13:32Z", "event_type": "DescribeComplianceByConfigRule", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed523749d-2284-4964-8c7e-0ca433054b87", "eventTime": "2018-12-19T23:13:32Z", "eventName": "DescribeComplianceByConfigRule", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"complianceByConfigRules": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe9a791-7b48-4ca2-95e6-d4eb3fceafe4", "record_id": "flaws_cloudtrail:0000032:2fe9a791-7b48-4ca2-95e6-d4eb3fceafe4", "row_index": 32, "timestamp": "2018-12-19T23:13:32Z", "event_type": "DescribeComplianceByResource", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 2215, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe9a791-7b48-4ca2-95e6-d4eb3fceafe4", "eventTime": "2018-12-19T23:13:32Z", "eventName": "DescribeComplianceByResource", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 0}, "responseElements": {"nextToken": "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", "complianceByResources": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460ba613-60da-45eb-9aa5-93beb2a3841b", "record_id": "flaws_cloudtrail:0000033:460ba613-60da-45eb-9aa5-93beb2a3841b", "row_index": 33, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeDeliveryChannelStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460ba613-60da-45eb-9aa5-93beb2a3841b", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeDeliveryChannelStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d24f6f-eaf2-4995-a323-0fff06461", "record_id": "flaws_cloudtrail:0000034:94d24f6f-eaf2-4995-a323-0fff06461", "row_index": 34, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d24f6f-eaf2-4995-a323-0fff06461", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ce8bfa0-3aa6-409f-8b47-518e33962ae", "record_id": "flaws_cloudtrail:0000035:0ce8bfa0-3aa6-409f-8b47-518e33962ae", "row_index": 35, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeDeliveryChannels", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ce8bfa0-3aa6-409f-8b47-518e33962ae", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeDeliveryChannels", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb58cbf7-7394-4ea3-b913-8acabf362dfc", "record_id": "flaws_cloudtrail:0000036:fb58cbf7-7394-4ea3-b913-8acabf362dfc", "row_index": 36, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb58cbf7-7394-4ea3-b913-8acabf362dfc", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c27a17c9-d7be-448c-b523-d6e715b8fb75", "record_id": "flaws_cloudtrail:0000037:c27a17c9-d7be-448c-b523-d6e715b8fb75", "row_index": 37, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c27a17c9-d7be-448c-b523-d6e715b8fb75", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"configRules": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac841c3-e1e3-4e92-b288-06fadf443f9f", "record_id": "flaws_cloudtrail:0000038:4ac841c3-e1e3-4e92-b288-06fadf443f9f", "row_index": 38, "timestamp": "2018-12-19T23:13:33Z", "event_type": "DescribeConfigRuleEvaluationStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac841c3-e1e3-4e92-b288-06fadf443f9f", "eventTime": "2018-12-19T23:13:33Z", "eventName": "DescribeConfigRuleEvaluationStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 0}, "responseElements": {"configRulesEvaluationStatus": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd8cc50b-1005-4c44-8300-8c8b5e55a5d5", "record_id": "flaws_cloudtrail:0000039:dd8cc50b-1005-4c44-8300-8c8b5e55a5d5", "row_index": 39, "timestamp": "2018-12-19T23:13:34Z", "event_type": "ListPipelines", "event_source": "datapipeline.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd8cc50b-1005-4c44-8300-8c8b5e55a5d5", "eventTime": "2018-12-19T23:13:34Z", "eventName": "ListPipelines", "eventSource": "datapipeline.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "876a17fd-c7d7-4d42-a197-87e0c1b639c5", "record_id": "flaws_cloudtrail:0000040:876a17fd-c7d7-4d42-a197-87e0c1b639c5", "row_index": 40, "timestamp": "2018-12-19T23:13:35Z", "event_type": "DescribeDefaultParameters", "event_source": "dax.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "876a17fd-c7d7-4d42-a197-87e0c1b639c5", "eventTime": "2018-12-19T23:13:35Z", "eventName": "DescribeDefaultParameters", "eventSource": "dax.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31aa2c4a-2c07-4136-a0f9-8907c30180", "record_id": "flaws_cloudtrail:0000041:31aa2c4a-2c07-4136-a0f9-8907c30180", "row_index": 41, "timestamp": "2018-12-19T23:13:35Z", "event_type": "DescribeClusters", "event_source": "dax.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31aa2c4a-2c07-4136-a0f9-8907c30180", "eventTime": "2018-12-19T23:13:35Z", "eventName": "DescribeClusters", "eventSource": "dax.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c49ef31-e664-425a-9987-9a98197fd697", "record_id": "flaws_cloudtrail:0000042:5c49ef31-e664-425a-9987-9a98197fd697", "row_index": 42, "timestamp": "2018-12-19T23:13:36Z", "event_type": "DescribeSubnetGroups", "event_source": "dax.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c49ef31-e664-425a-9987-9a98197fd697", "eventTime": "2018-12-19T23:13:36Z", "eventName": "DescribeSubnetGroups", "eventSource": "dax.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51dfbb70-d614-45e4-b074-79b24288c", "record_id": "flaws_cloudtrail:0000043:51dfbb70-d614-45e4-b074-79b24288c", "row_index": 43, "timestamp": "2018-12-19T23:13:36Z", "event_type": "DescribeParameterGroups", "event_source": "dax.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51dfbb70-d614-45e4-b074-79b24288c", "eventTime": "2018-12-19T23:13:36Z", "eventName": "DescribeParameterGroups", "eventSource": "dax.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "507d1ab3-f80e-4c66-b0d2-ddcba4a7ce5a", "record_id": "flaws_cloudtrail:0000044:507d1ab3-f80e-4c66-b0d2-ddcba4a7ce5a", "row_index": 44, "timestamp": "2018-12-19T23:13:36Z", "event_type": "DescribeEvents", "event_source": "dax.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "507d1ab3-f80e-4c66-b0d2-ddcba4a7ce5a", "eventTime": "2018-12-19T23:13:36Z", "eventName": "DescribeEvents", "eventSource": "dax.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61444d-05b6-4436-9fcf-91eca6aa14d5", "record_id": "flaws_cloudtrail:0000045:61444d-05b6-4436-9fcf-91eca6aa14d5", "row_index": 45, "timestamp": "2018-12-19T23:13:36Z", "event_type": "ListProjects", "event_source": "devicefarm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61444d-05b6-4436-9fcf-91eca6aa14d5", "eventTime": "2018-12-19T23:13:36Z", "eventName": "ListProjects", "eventSource": "devicefarm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: devicefarm:ListProjects", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16e05197-7999-44dc-add7-2a0eb6c3a01f", "record_id": "flaws_cloudtrail:0000046:16e05197-7999-44dc-add7-2a0eb6c3a01f", "row_index": 46, "timestamp": "2018-12-19T23:13:36Z", "event_type": "ListDevices", "event_source": "devicefarm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16e05197-7999-44dc-add7-2a0eb6c3a01f", "eventTime": "2018-12-19T23:13:36Z", "eventName": "ListDevices", "eventSource": "devicefarm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: devicefarm:ListDevices", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d32045-fbab-40cd-8bc2-ea322519d85", "record_id": "flaws_cloudtrail:0000047:33d32045-fbab-40cd-8bc2-ea322519d85", "row_index": 47, "timestamp": "2018-12-19T23:13:37Z", "event_type": "DescribeLags", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d32045-fbab-40cd-8bc2-ea322519d85", "eventTime": "2018-12-19T23:13:37Z", "eventName": "DescribeLags", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"lags": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b744376-f1d9-4d3d-9df6-96777f796", "record_id": "flaws_cloudtrail:0000048:44b744376-f1d9-4d3d-9df6-96777f796", "row_index": 48, "timestamp": "2018-12-19T23:13:37Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b744376-f1d9-4d3d-9df6-96777f796", "eventTime": "2018-12-19T23:13:37Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b96400-ded3-4703-b5e1-dab30ad2d753", "record_id": "flaws_cloudtrail:0000049:1b96400-ded3-4703-b5e1-dab30ad2d753", "row_index": 49, "timestamp": "2018-12-19T23:13:38Z", "event_type": "DescribeAccountAttributes", "event_source": "dms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b96400-ded3-4703-b5e1-dab30ad2d753", "eventTime": "2018-12-19T23:13:38Z", "eventName": "DescribeAccountAttributes", "eventSource": "dms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0adca783-b1e3-4848-8182-231d80ce3d9c", "record_id": "flaws_cloudtrail:0000050:0adca783-b1e3-4848-8182-231d80ce3d9c", "row_index": 50, "timestamp": "2018-12-19T23:13:39Z", "event_type": "DescribeConnections", "event_source": "dms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0adca783-b1e3-4848-8182-231d80ce3d9c", "eventTime": "2018-12-19T23:13:39Z", "eventName": "DescribeConnections", "eventSource": "dms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "380a5ef0-a738-49ec-8437-42a357a83acf", "record_id": "flaws_cloudtrail:0000051:380a5ef0-a738-49ec-8437-42a357a83acf", "row_index": 51, "timestamp": "2018-12-19T23:13:39Z", "event_type": "DescribeEvents", "event_source": "dms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "380a5ef0-a738-49ec-8437-42a357a83acf", "eventTime": "2018-12-19T23:13:39Z", "eventName": "DescribeEvents", "eventSource": "dms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "059bf7ce-0ee1-4f38-884b-a83c135300de", "record_id": "flaws_cloudtrail:0000052:059bf7ce-0ee1-4f38-884b-a83c135300de", "row_index": 52, "timestamp": "2018-12-19T23:13:39Z", "event_type": "DescribeDirectories", "event_source": "ds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "059bf7ce-0ee1-4f38-884b-a83c135300de", "eventTime": "2018-12-19T23:13:39Z", "eventName": "DescribeDirectories", "eventSource": "ds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "059d50a0-7560-4408-aabc-da5b5418f2cf", "record_id": "flaws_cloudtrail:0000053:059d50a0-7560-4408-aabc-da5b5418f2cf", "row_index": 53, "timestamp": "2018-12-19T23:13:40Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "059d50a0-7560-4408-aabc-da5b5418f2cf", "eventTime": "2018-12-19T23:13:40Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f31dfb27-a612-48f4-a19d-7bf25f0960bd", "record_id": "flaws_cloudtrail:0000054:f31dfb27-a612-48f4-a19d-7bf25f0960bd", "row_index": 54, "timestamp": "2018-12-19T23:13:40Z", "event_type": "DescribeLimits", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f31dfb27-a612-48f4-a19d-7bf25f0960bd", "eventTime": "2018-12-19T23:13:40Z", "eventName": "DescribeLimits", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: dynamodb:DescribeLimits on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c150100a2-5e69-4e02-adcd-9d2fc843b770", "record_id": "flaws_cloudtrail:0000055:c150100a2-5e69-4e02-adcd-9d2fc843b770", "row_index": 55, "timestamp": "2018-12-19T23:13:40Z", "event_type": "ListBackups", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c150100a2-5e69-4e02-adcd-9d2fc843b770", "eventTime": "2018-12-19T23:13:40Z", "eventName": "ListBackups", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8c81e3-7e55-4297-b272-e0b46d33da40", "record_id": "flaws_cloudtrail:0000056:5d8c81e3-7e55-4297-b272-e0b46d33da40", "row_index": 56, "timestamp": "2018-12-19T23:13:41Z", "event_type": "ListGlobalTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8c81e3-7e55-4297-b272-e0b46d33da40", "eventTime": "2018-12-19T23:13:41Z", "eventName": "ListGlobalTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1bf2212-bee6-408b-9f4a-08bda44232cf", "record_id": "flaws_cloudtrail:0000057:a1bf2212-bee6-408b-9f4a-08bda44232cf", "row_index": 57, "timestamp": "2018-12-19T23:13:41Z", "event_type": "ListStreams", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1bf2212-bee6-408b-9f4a-08bda44232cf", "eventTime": "2018-12-19T23:13:41Z", "eventName": "ListStreams", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a6561dd-cc0c-48b2-bdad-5b05d6156d0e", "record_id": "flaws_cloudtrail:0000058:2a6561dd-cc0c-48b2-bdad-5b05d6156d0e", "row_index": 58, "timestamp": "2018-12-19T23:13:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a6561dd-cc0c-48b2-bdad-5b05d6156d0e", "eventTime": "2018-12-19T23:13:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dfe6a69-b72a-4ea8-9030-18c08e3b8fb5", "record_id": "flaws_cloudtrail:0000059:5dfe6a69-b72a-4ea8-9030-18c08e3b8fb5", "row_index": 59, "timestamp": "2018-12-19T23:13:42Z", "event_type": "CreateImage", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dfe6a69-b72a-4ea8-9030-18c08e3b8fb5", "eventTime": "2018-12-19T23:13:42Z", "eventName": "CreateImage", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instanceId": "i-6dfdcd0b22f33029a", "name": "testimage"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9e7a41-6b6b-4f70-9154-18e03496f87e", "record_id": "flaws_cloudtrail:0000060:3f9e7a41-6b6b-4f70-9154-18e03496f87e", "row_index": 60, "timestamp": "2018-12-19T23:13:42Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9e7a41-6b6b-4f70-9154-18e03496f87e", "eventTime": "2018-12-19T23:13:42Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6093b1fe-af4d-44df-81e8-72e32ca947a3", "record_id": "flaws_cloudtrail:0000061:6093b1fe-af4d-44df-81e8-72e32ca947a3", "row_index": 61, "timestamp": "2018-12-19T23:13:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6093b1fe-af4d-44df-81e8-72e32ca947a3", "eventTime": "2018-12-19T23:13:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e25301-a983-45cb-816a-f49cb1583d26", "record_id": "flaws_cloudtrail:0000062:e25301-a983-45cb-816a-f49cb1583d26", "row_index": 62, "timestamp": "2018-12-19T23:13:42Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1425, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e25301-a983-45cb-816a-f49cb1583d26", "eventTime": "2018-12-19T23:13:42Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Gxtl_9BgYbefozxW0JWV-0ACfsanESihBtlrTvOYSoVkw2o0wZ1J_X927Oj5ty5YvzVdtbnjSQAOay0T0hu6x5I3iySOgkzi1EYEZTaMfQGWVNbpDXQQ_o4i_MJetzKWjGUl9lQfdcv26lujiCwnnXiYWITeMeEiWBAECIiHyh8tQpE5vuvfxZHZEg2Y9yMWP03KsW5Eo30FqpP1l9ySqYWPA7nNw08M-8lskhJ7kGVYJYiqybO1GTHqOKvYYXQnd9-g3MIqMep2W2-BzB7J0jiO4yfckuMWs6Vq-zPM7Yw18FdIPpPaOcmTzwdyKEYVCYN8fkTlRHs23zHSEGjFiD6-hPlAnPGX6wv28Z8eEIq1MQYOQqPUhec3SKYwV9ogEWJE4PmynCH3R2S1BnGM_NR3DnJACV6C0x0p54KhTzbULbnRmC1921k4xz6-NhDxSXRny2OdFeivVKLy03gGUb_bj1yB1EewgouyPx_ov_oESiioidSj_S8IO68OceUMp6_P6iOE9zpLjhJswoAqEMlIpM7bq41BYnZyB1pkTOWIhtZt8_5LPV0_gW6UJI-qnS5T6K6KBQM6cRs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"size": "8", "zone": "us-east-1a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad933373-15cf-4a63-8c72-3ec92f776b56", "record_id": "flaws_cloudtrail:0000063:5ad933373-15cf-4a63-8c72-3ec92f776b56", "row_index": 63, "timestamp": "2018-12-19T23:13:42Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad933373-15cf-4a63-8c72-3ec92f776b56", "eventTime": "2018-12-19T23:13:42Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b76519e-1f68-48da-a468-c5b13b843717f", "record_id": "flaws_cloudtrail:0000064:9b76519e-1f68-48da-a468-c5b13b843717f", "row_index": 64, "timestamp": "2018-12-19T23:13:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b76519e-1f68-48da-a468-c5b13b843717f", "eventTime": "2018-12-19T23:13:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c3bea5-84bc-4049-93b3-ae7bb873c4b3", "record_id": "flaws_cloudtrail:0000065:42c3bea5-84bc-4049-93b3-ae7bb873c4b3", "row_index": 65, "timestamp": "2018-12-19T23:13:43Z", "event_type": "DescribeClassicLinkInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c3bea5-84bc-4049-93b3-ae7bb873c4b3", "eventTime": "2018-12-19T23:13:43Z", "eventName": "DescribeClassicLinkInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeb475962-1c7b-43ce-8b26-fe355a6e8c95", "record_id": "flaws_cloudtrail:0000066:aeb475962-1c7b-43ce-8b26-fe355a6e8c95", "row_index": 66, "timestamp": "2018-12-19T23:13:43Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeb475962-1c7b-43ce-8b26-fe355a6e8c95", "eventTime": "2018-12-19T23:13:43Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ed210fe-35cc-4a83-80de-e8adcaeac4c3", "record_id": "flaws_cloudtrail:0000067:2ed210fe-35cc-4a83-80de-e8adcaeac4c3", "row_index": 67, "timestamp": "2018-12-19T23:13:43Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ed210fe-35cc-4a83-80de-e8adcaeac4c3", "eventTime": "2018-12-19T23:13:43Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"availabilityZoneSet": {}, "availabilityZoneIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d78efc2e-d112-4dc2-b688-341ef4d4934c", "record_id": "flaws_cloudtrail:0000068:d78efc2e-d112-4dc2-b688-341ef4d4934c", "row_index": 68, "timestamp": "2018-12-19T23:13:43Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d78efc2e-d112-4dc2-b688-341ef4d4934c", "eventTime": "2018-12-19T23:13:43Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033356e2b-f282-4bbd-92fe-117ab9ccd7ef", "record_id": "flaws_cloudtrail:0000069:033356e2b-f282-4bbd-92fe-117ab9ccd7ef", "row_index": 69, "timestamp": "2018-12-19T23:13:43Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033356e2b-f282-4bbd-92fe-117ab9ccd7ef", "eventTime": "2018-12-19T23:13:43Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f47c4b-5072-4a75-b628-a7ef46bd9378", "record_id": "flaws_cloudtrail:0000070:56f47c4b-5072-4a75-b628-a7ef46bd9378", "row_index": 70, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAL7E0ISGQEW6DNUR7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f47c4b-5072-4a75-b628-a7ef46bd9378", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL7E0ISGQEW6DNUR7", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:13:41Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed7a3ca-1692-4d0f-88dd-317ad210c543", "record_id": "flaws_cloudtrail:0000071:bed7a3ca-1692-4d0f-88dd-317ad210c543", "row_index": 71, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed7a3ca-1692-4d0f-88dd-317ad210c543", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a692ce2-f75c-4cf4-b850-4714e12e28a9", "record_id": "flaws_cloudtrail:0000072:0a692ce2-f75c-4cf4-b850-4714e12e28a9", "row_index": 72, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a692ce2-f75c-4cf4-b850-4714e12e28a9", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ab08dbb-fc14-47ec-b975-e0f0716ed841", "record_id": "flaws_cloudtrail:0000073:5ab08dbb-fc14-47ec-b975-e0f0716ed841", "row_index": 73, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ab08dbb-fc14-47ec-b975-e0f0716ed841", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c55055-4545-48eb-9478-ee692c55f6e3", "record_id": "flaws_cloudtrail:0000074:28c55055-4545-48eb-9478-ee692c55f6e3", "row_index": 74, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeEgressOnlyInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c55055-4545-48eb-9478-ee692c55f6e3", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeEgressOnlyInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeEgressOnlyInternetGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deaa44bd-835a-4253-a1a1-eb8806d5523d", "record_id": "flaws_cloudtrail:0000075:deaa44bd-835a-4253-a1a1-eb8806d5523d", "row_index": 75, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deaa44bd-835a-4253-a1a1-eb8806d5523d", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757505-7c20-484b-b397-30f2d16f36b6", "record_id": "flaws_cloudtrail:0000076:757505-7c20-484b-b397-30f2d16f36b6", "row_index": 76, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeHostReservations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757505-7c20-484b-b397-30f2d16f36b6", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeHostReservations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostReservationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b1d672-cd65-4082-8342-8aee819f6699", "record_id": "flaws_cloudtrail:0000077:26b1d672-cd65-4082-8342-8aee819f6699", "row_index": 77, "timestamp": "2018-12-19T23:13:44Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b1d672-cd65-4082-8342-8aee819f6699", "eventTime": "2018-12-19T23:13:44Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f110f159-b4ab-4408-86df-91a1694fa40b", "record_id": "flaws_cloudtrail:0000078:f110f159-b4ab-4408-86df-91a1694fa40b", "row_index": 78, "timestamp": "2018-12-19T23:13:45Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f110f159-b4ab-4408-86df-91a1694fa40b", "eventTime": "2018-12-19T23:13:45Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890ef03d-27d5-476c-be29-dafa66952", "record_id": "flaws_cloudtrail:0000079:890ef03d-27d5-476c-be29-dafa66952", "row_index": 79, "timestamp": "2018-12-19T23:13:45Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890ef03d-27d5-476c-be29-dafa66952", "eventTime": "2018-12-19T23:13:45Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d84ca02-aeb2-4a8e-88c0-d23ea6eb0c4a", "record_id": "flaws_cloudtrail:0000080:0d84ca02-aeb2-4a8e-88c0-d23ea6eb0c4a", "row_index": 80, "timestamp": "2018-12-19T23:13:45Z", "event_type": "DescribeIamInstanceProfileAssociations", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d84ca02-aeb2-4a8e-88c0-d23ea6eb0c4a", "eventTime": "2018-12-19T23:13:45Z", "eventName": "DescribeIamInstanceProfileAssociations", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeIamInstanceProfileAssociationsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e09d4e7-5f63-415d-aef2-dfccfa61a2ee", "record_id": "flaws_cloudtrail:0000081:5e09d4e7-5f63-415d-aef2-dfccfa61a2ee", "row_index": 81, "timestamp": "2018-12-19T23:13:45Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e09d4e7-5f63-415d-aef2-dfccfa61a2ee", "eventTime": "2018-12-19T23:13:45Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f321fb8-d3d9-447a-9b25-db0a9500c11f", "record_id": "flaws_cloudtrail:0000082:1f321fb8-d3d9-447a-9b25-db0a9500c11f", "row_index": 82, "timestamp": "2018-12-19T23:13:45Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f321fb8-d3d9-447a-9b25-db0a9500c11f", "eventTime": "2018-12-19T23:13:45Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779353-97bd-44be-9dbd-13d7177e7a5c", "record_id": "flaws_cloudtrail:0000083:779353-97bd-44be-9dbd-13d7177e7a5c", "row_index": 83, "timestamp": "2018-12-19T23:13:45Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779353-97bd-44be-9dbd-13d7177e7a5c", "eventTime": "2018-12-19T23:13:45Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "asdfg05815"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d53ed55-4adc-4bb7-8c93-2b911840b46d", "record_id": "flaws_cloudtrail:0000084:9d53ed55-4adc-4bb7-8c93-2b911840b46d", "row_index": 84, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d53ed55-4adc-4bb7-8c93-2b911840b46d", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbd740bd-af28-4942-813d-cec103e97169", "record_id": "flaws_cloudtrail:0000085:cbd740bd-af28-4942-813d-cec103e97169", "row_index": 85, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbd740bd-af28-4942-813d-cec103e97169", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937fdb23-b885-409a-9cd9-b9b4ab1b10a7", "record_id": "flaws_cloudtrail:0000086:937fdb23-b885-409a-9cd9-b9b4ab1b10a7", "row_index": 86, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937fdb23-b885-409a-9cd9-b9b4ab1b10a7", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe4fdefd-61e5-49f1-87fe-8c9c4c75787c", "record_id": "flaws_cloudtrail:0000087:fe4fdefd-61e5-49f1-87fe-8c9c4c75787c", "row_index": 87, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribePrefixLists", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe4fdefd-61e5-49f1-87fe-8c9c4c75787c", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribePrefixLists", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribePrefixListsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c124735-2474-40c6-8046-ea95d0b78195", "record_id": "flaws_cloudtrail:0000088:4c124735-2474-40c6-8046-ea95d0b78195", "row_index": 88, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribeReservedInstancesListings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c124735-2474-40c6-8046-ea95d0b78195", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribeReservedInstancesListings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.OptInRequired", "errorMessage": "AccountId '811596193553', You are not authorized to use the requested product. Please complete the seller registration https://portal.aws.amazon.com/ec2/ri/seller_registration?action=businessInfo.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesListingSet": {}, "reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a2f7d6-1541-4e00-826a-962dd9743f3f", "record_id": "flaws_cloudtrail:0000089:f6a2f7d6-1541-4e00-826a-962dd9743f3f", "row_index": 89, "timestamp": "2018-12-19T23:13:46Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a2f7d6-1541-4e00-826a-962dd9743f3f", "eventTime": "2018-12-19T23:13:46Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "739f934a-c278-4b60-90d4-0395e4c031765", "record_id": "flaws_cloudtrail:0000090:739f934a-c278-4b60-90d4-0395e4c031765", "row_index": 90, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "739f934a-c278-4b60-90d4-0395e4c031765", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "410968-77b5-4615-b336-2de6b405475df", "record_id": "flaws_cloudtrail:0000091:410968-77b5-4615-b336-2de6b405475df", "row_index": 91, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "410968-77b5-4615-b336-2de6b405475df", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9693fa8f-100f-47b3-b727-b046b81127", "record_id": "flaws_cloudtrail:0000092:9693fa8f-100f-47b3-b727-b046b81127", "row_index": 92, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9693fa8f-100f-47b3-b727-b046b81127", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f20d94-2d08-45b7-b9e6-a562207c", "record_id": "flaws_cloudtrail:0000093:52f20d94-2d08-45b7-b9e6-a562207c", "row_index": 93, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeScheduledInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f20d94-2d08-45b7-b9e6-a562207c", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeScheduledInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeScheduledInstancesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b42f1f40-ca2d-4468-9f4d-26f73db167a4", "record_id": "flaws_cloudtrail:0000094:b42f1f40-ca2d-4468-9f4d-26f73db167a4", "row_index": 94, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b42f1f40-ca2d-4468-9f4d-26f73db167a4", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f723a807-a552-497a-aea9-1c4e23780eb3", "record_id": "flaws_cloudtrail:0000095:f723a807-a552-497a-aea9-1c4e23780eb3", "row_index": 95, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f723a807-a552-497a-aea9-1c4e23780eb3", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0df52d1e-7fb2-4595-bc37-8a84036edd5", "record_id": "flaws_cloudtrail:0000096:0df52d1e-7fb2-4595-bc37-8a84036edd5", "row_index": 96, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0df52d1e-7fb2-4595-bc37-8a84036edd5", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855183-4b4f-45db-beef-73a89f6728b4", "record_id": "flaws_cloudtrail:0000097:855183-4b4f-45db-beef-73a89f6728b4", "row_index": 97, "timestamp": "2018-12-19T23:13:47Z", "event_type": "DescribeReservedInstancesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855183-4b4f-45db-beef-73a89f6728b4", "eventTime": "2018-12-19T23:13:47Z", "eventName": "DescribeReservedInstancesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesModificationSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e539be-33f7-4ad4-a8fe-b5aabab6a062", "record_id": "flaws_cloudtrail:0000098:89e539be-33f7-4ad4-a8fe-b5aabab6a062", "row_index": 98, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e539be-33f7-4ad4-a8fe-b5aabab6a062", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8398e31e-48bc-4b4e-af69-4d179251fdcb", "record_id": "flaws_cloudtrail:0000099:8398e31e-48bc-4b4e-af69-4d179251fdcb", "row_index": 99, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcClassicLinkDnsSupport", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8398e31e-48bc-4b4e-af69-4d179251fdcb", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcClassicLinkDnsSupport", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcClassicLinkDnsSupportRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456f7ba9-e6a0-45f9-b896-84224fa21b5b", "record_id": "flaws_cloudtrail:0000100:456f7ba9-e6a0-45f9-b896-84224fa21b5b", "row_index": 100, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcEndpointServices", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456f7ba9-e6a0-45f9-b896-84224fa21b5b", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcEndpointServices", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointServicesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc56c14-78c2-4a66-a6f7-318ed8b040cd", "record_id": "flaws_cloudtrail:0000101:8bc56c14-78c2-4a66-a6f7-318ed8b040cd", "row_index": 101, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc56c14-78c2-4a66-a6f7-318ed8b040cd", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93fd9693-fe22-4556-8ee1-601439ff9b0c1", "record_id": "flaws_cloudtrail:0000102:93fd9693-fe22-4556-8ee1-601439ff9b0c1", "row_index": 102, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93fd9693-fe22-4556-8ee1-601439ff9b0c1", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cf1b11f-c7ab-4ef6-a35f-2a010ad25998", "record_id": "flaws_cloudtrail:0000103:3cf1b11f-c7ab-4ef6-a35f-2a010ad25998", "row_index": 103, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cf1b11f-c7ab-4ef6-a35f-2a010ad25998", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bb8119e-4c91-44ef-b0b9-7d3bab31fbb4", "record_id": "flaws_cloudtrail:0000104:3bb8119e-4c91-44ef-b0b9-7d3bab31fbb4", "row_index": 104, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bb8119e-4c91-44ef-b0b9-7d3bab31fbb4", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa8d82a-5ffd-488f-a245-f80f5fedf91f", "record_id": "flaws_cloudtrail:0000105:0aa8d82a-5ffd-488f-a245-f80f5fedf91f", "row_index": 105, "timestamp": "2018-12-19T23:13:48Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa8d82a-5ffd-488f-a245-f80f5fedf91f", "eventTime": "2018-12-19T23:13:48Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cb5bcb-12f6-48e2-87d9-bbca61907c", "record_id": "flaws_cloudtrail:0000106:28cb5bcb-12f6-48e2-87d9-bbca61907c", "row_index": 106, "timestamp": "2018-12-19T23:13:48Z", "event_type": "CreateVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cb5bcb-12f6-48e2-87d9-bbca61907c", "eventTime": "2018-12-19T23:13:48Z", "eventName": "CreateVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"cidrBlock": "39.3.6.88/16"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84307fbe-898b-4a57-9f95-cf31c6cdac5d", "record_id": "flaws_cloudtrail:0000107:84307fbe-898b-4a57-9f95-cf31c6cdac5d", "row_index": 107, "timestamp": "2018-12-19T23:13:49Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84307fbe-898b-4a57-9f95-cf31c6cdac5d", "eventTime": "2018-12-19T23:13:49Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b46c5f63-8c90-4c4f-bbe4-c23f4b9a63f4", "record_id": "flaws_cloudtrail:0000108:b46c5f63-8c90-4c4f-bbe4-c23f4b9a63f4", "row_index": 108, "timestamp": "2018-12-19T23:13:49Z", "event_type": "ListClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b46c5f63-8c90-4c4f-bbe4-c23f4b9a63f4", "eventTime": "2018-12-19T23:13:49Z", "eventName": "ListClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9a2f705-7b3b-48d3-aafc-96f2c55303ec", "record_id": "flaws_cloudtrail:0000109:f9a2f705-7b3b-48d3-aafc-96f2c55303ec", "row_index": 109, "timestamp": "2018-12-19T23:13:50Z", "event_type": "ListTaskDefinitions", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9a2f705-7b3b-48d3-aafc-96f2c55303ec", "eventTime": "2018-12-19T23:13:50Z", "eventName": "ListTaskDefinitions", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "244268f-5781-4765-883f-32dba62e6b79", "record_id": "flaws_cloudtrail:0000110:244268f-5781-4765-883f-32dba62e6b79", "row_index": 110, "timestamp": "2018-12-19T23:13:50Z", "event_type": "ListContainerInstances", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "244268f-5781-4765-883f-32dba62e6b79", "eventTime": "2018-12-19T23:13:50Z", "eventName": "ListContainerInstances", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "ClientException", "errorMessage": "Cluster not found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d58697-e685-4c63-aa9c-dfd5ccea19c6", "record_id": "flaws_cloudtrail:0000111:3d58697-e685-4c63-aa9c-dfd5ccea19c6", "row_index": 111, "timestamp": "2018-12-19T23:13:50Z", "event_type": "DescribeClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d58697-e685-4c63-aa9c-dfd5ccea19c6", "eventTime": "2018-12-19T23:13:50Z", "eventName": "DescribeClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceae9beb-0f7a-4b4e-8dd9-f6df65f8a0a1", "record_id": "flaws_cloudtrail:0000112:ceae9beb-0f7a-4b4e-8dd9-f6df65f8a0a1", "row_index": 112, "timestamp": "2018-12-19T23:13:51Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceae9beb-0f7a-4b4e-8dd9-f6df65f8a0a1", "eventTime": "2018-12-19T23:13:51Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9249c8d7-6d03-434e-9679-f0a509d7e315", "record_id": "flaws_cloudtrail:0000113:9249c8d7-6d03-434e-9679-f0a509d7e315", "row_index": 113, "timestamp": "2018-12-19T23:13:51Z", "event_type": "DescribeMountTargets", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9249c8d7-6d03-434e-9679-f0a509d7e315", "eventTime": "2018-12-19T23:13:51Z", "eventName": "DescribeMountTargets", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: elasticfilesystem:DescribeMountTargets on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf91047-7150-4d91-86c3-1e5eca80544", "record_id": "flaws_cloudtrail:0000114:caf91047-7150-4d91-86c3-1e5eca80544", "row_index": 114, "timestamp": "2018-12-19T23:13:51Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf91047-7150-4d91-86c3-1e5eca80544", "eventTime": "2018-12-19T23:13:51Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0c3719-d984-4c4b-9f58-6f89c3e9432e", "record_id": "flaws_cloudtrail:0000115:cf0c3719-d984-4c4b-9f58-6f89c3e9432e", "row_index": 115, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeReservedCacheNodes", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0c3719-d984-4c4b-9f58-6f89c3e9432e", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeReservedCacheNodes", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eaa4d96-f59d-4446-ad42-28d3a490a51d", "record_id": "flaws_cloudtrail:0000116:1eaa4d96-f59d-4446-ad42-28d3a490a51d", "row_index": 116, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeEvents", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eaa4d96-f59d-4446-ad42-28d3a490a51d", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeEvents", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "566e0c4c-0d0b-4486-896b-7609d74ee4fb", "record_id": "flaws_cloudtrail:0000117:566e0c4c-0d0b-4486-896b-7609d74ee4fb", "row_index": 117, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "566e0c4c-0d0b-4486-896b-7609d74ee4fb", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c880b23c-2f20-4c1d-87ed-17d5a35311ac", "record_id": "flaws_cloudtrail:0000118:c880b23c-2f20-4c1d-87ed-17d5a35311ac", "row_index": 118, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeReplicationGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c880b23c-2f20-4c1d-87ed-17d5a35311ac", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeReplicationGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af23a2e6-ff9e-4a86-8946-125ff96e1b67", "record_id": "flaws_cloudtrail:0000119:af23a2e6-ff9e-4a86-8946-125ff96e1b67", "row_index": 119, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeCacheEngineVersions", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af23a2e6-ff9e-4a86-8946-125ff96e1b67", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeCacheEngineVersions", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"defaultOnly": false, "maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d933031-1f12-4a44-9d27-0e6915b2b4a1", "record_id": "flaws_cloudtrail:0000120:8d933031-1f12-4a44-9d27-0e6915b2b4a1", "row_index": 120, "timestamp": "2018-12-19T23:13:52Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d933031-1f12-4a44-9d27-0e6915b2b4a1", "eventTime": "2018-12-19T23:13:52Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f68d3236-fd6c-461e-bcf4-f9c7a536167a", "record_id": "flaws_cloudtrail:0000121:f68d3236-fd6c-461e-bcf4-f9c7a536167a", "row_index": 121, "timestamp": "2018-12-19T23:13:53Z", "event_type": "DescribeReservedCacheNodesOfferings", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f68d3236-fd6c-461e-bcf4-f9c7a536167a", "eventTime": "2018-12-19T23:13:53Z", "eventName": "DescribeReservedCacheNodesOfferings", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35824d1-4023-4e71-aefd-3032dcdc2b73", "record_id": "flaws_cloudtrail:0000122:c35824d1-4023-4e71-aefd-3032dcdc2b73", "row_index": 122, "timestamp": "2018-12-19T23:13:53Z", "event_type": "DescribeSnapshots", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35824d1-4023-4e71-aefd-3032dcdc2b73", "eventTime": "2018-12-19T23:13:53Z", "eventName": "DescribeSnapshots", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89cf24cb-c261-45d2-8716-928c60fc1130", "record_id": "flaws_cloudtrail:0000123:89cf24cb-c261-45d2-8716-928c60fc1130", "row_index": 123, "timestamp": "2018-12-19T23:13:54Z", "event_type": "DescribeApplicationVersions", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89cf24cb-c261-45d2-8716-928c60fc1130", "eventTime": "2018-12-19T23:13:54Z", "eventName": "DescribeApplicationVersions", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7465cf42-1da4-455f-b2c3-499c442bcc5d", "record_id": "flaws_cloudtrail:0000124:7465cf42-1da4-455f-b2c3-499c442bcc5d", "row_index": 124, "timestamp": "2018-12-19T23:13:54Z", "event_type": "DescribeEnvironments", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7465cf42-1da4-455f-b2c3-499c442bcc5d", "eventTime": "2018-12-19T23:13:54Z", "eventName": "DescribeEnvironments", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9fdd23f-1af9-41a6-ac75-b3d6a6e3aaa2", "record_id": "flaws_cloudtrail:0000125:e9fdd23f-1af9-41a6-ac75-b3d6a6e3aaa2", "row_index": 125, "timestamp": "2018-12-19T23:13:54Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9fdd23f-1af9-41a6-ac75-b3d6a6e3aaa2", "eventTime": "2018-12-19T23:13:54Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c224670a1-aa41-411e-a6d5-ab05f82d969a", "record_id": "flaws_cloudtrail:0000126:c224670a1-aa41-411e-a6d5-ab05f82d969a", "row_index": 126, "timestamp": "2018-12-19T23:13:54Z", "event_type": "DescribeConfigurationOptions", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c224670a1-aa41-411e-a6d5-ab05f82d969a", "eventTime": "2018-12-19T23:13:54Z", "eventName": "DescribeConfigurationOptions", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "InvalidParameterValueException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "680a7d89-9548-411a-9094-3f163c28dfa4", "record_id": "flaws_cloudtrail:0000127:680a7d89-9548-411a-9094-3f163c28dfa4", "row_index": 127, "timestamp": "2018-12-19T23:13:55Z", "event_type": "DescribeEnvironmentHealth", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "680a7d89-9548-411a-9094-3f163c28dfa4", "eventTime": "2018-12-19T23:13:55Z", "eventName": "DescribeEnvironmentHealth", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "MissingRequiredParameterException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3194ce-34a5-4855-8157-d1c40e2a4b05", "record_id": "flaws_cloudtrail:0000128:3c3194ce-34a5-4855-8157-d1c40e2a4b05", "row_index": 128, "timestamp": "2018-12-19T23:14:01Z", "event_type": "DescribeEnvironmentManagedActionHistory", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3194ce-34a5-4855-8157-d1c40e2a4b05", "eventTime": "2018-12-19T23:14:01Z", "eventName": "DescribeEnvironmentManagedActionHistory", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "MissingRequiredParameterException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxItems": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b92338bf-db91-4d24-86cb-2df328341cc7", "record_id": "flaws_cloudtrail:0000129:b92338bf-db91-4d24-86cb-2df328341cc7", "row_index": 129, "timestamp": "2018-12-19T23:14:01Z", "event_type": "DescribeEnvironmentManagedActions", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b92338bf-db91-4d24-86cb-2df328341cc7", "eventTime": "2018-12-19T23:14:01Z", "eventName": "DescribeEnvironmentManagedActions", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "MissingRequiredParameterException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f3341b9-ec66-476a-b5de-781cdd623d8d", "record_id": "flaws_cloudtrail:0000130:7f3341b9-ec66-476a-b5de-781cdd623d8d", "row_index": 130, "timestamp": "2018-12-19T23:14:02Z", "event_type": "DescribeEvents", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f3341b9-ec66-476a-b5de-781cdd623d8d", "eventTime": "2018-12-19T23:14:02Z", "eventName": "DescribeEvents", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ab53bc-f7f3-4404-b278-155d6b48d7ad", "record_id": "flaws_cloudtrail:0000131:96ab53bc-f7f3-4404-b278-155d6b48d7ad", "row_index": 131, "timestamp": "2018-12-19T23:14:03Z", "event_type": "DescribeInstancesHealth", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ab53bc-f7f3-4404-b278-155d6b48d7ad", "eventTime": "2018-12-19T23:14:03Z", "eventName": "DescribeInstancesHealth", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "MissingRequiredParameterException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96fb93ce-0c24-4da4-9d08-dbf314d425220", "record_id": "flaws_cloudtrail:0000132:96fb93ce-0c24-4da4-9d08-dbf314d425220", "row_index": 132, "timestamp": "2018-12-19T23:14:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96fb93ce-0c24-4da4-9d08-dbf314d425220", "eventTime": "2018-12-19T23:14:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e8764a6-a27c-4c45-8b18-29a1aeeb06b2", "record_id": "flaws_cloudtrail:0000133:8e8764a6-a27c-4c45-8b18-29a1aeeb06b2", "row_index": 133, "timestamp": "2018-12-19T23:14:04Z", "event_type": "DescribeAccountLimits", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e8764a6-a27c-4c45-8b18-29a1aeeb06b2", "eventTime": "2018-12-19T23:14:04Z", "eventName": "DescribeAccountLimits", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"limits": [{"max": "20", "name": "classic-load-balancers"}, {"max": "100", "name": "classic-listeners"}, {"max": "1000", "name": "classic-registered-instances"}]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40ead33e-7963-460d-8802-ded778238c", "record_id": "flaws_cloudtrail:0000134:40ead33e-7963-460d-8802-ded778238c", "row_index": 134, "timestamp": "2018-12-19T23:14:05Z", "event_type": "DescribeListeners", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40ead33e-7963-460d-8802-ded778238c", "eventTime": "2018-12-19T23:14:05Z", "eventName": "DescribeListeners", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "ValidationException", "errorMessage": "You must specify either either listener ARNs or a load balancer ARN", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfd0b7ef-6ca8-489c-b9fa-34517c7a819e", "record_id": "flaws_cloudtrail:0000135:cfd0b7ef-6ca8-489c-b9fa-34517c7a819e", "row_index": 135, "timestamp": "2018-12-19T23:14:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfd0b7ef-6ca8-489c-b9fa-34517c7a819e", "eventTime": "2018-12-19T23:14:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b067913c7-c219-4590-bff2-b86013ae1e2", "record_id": "flaws_cloudtrail:0000136:b067913c7-c219-4590-bff2-b86013ae1e2", "row_index": 136, "timestamp": "2018-12-19T23:14:05Z", "event_type": "DescribeAccountLimits", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1226, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b067913c7-c219-4590-bff2-b86013ae1e2", "eventTime": "2018-12-19T23:14:05Z", "eventName": "DescribeAccountLimits", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"limits": [{"max": "20", "name": "application-load-balancers"}, {"max": "3000", "name": "target-groups"}, {"max": "1000", "name": "targets-per-application-load-balancer"}, {"max": "50", "name": "listeners-per-application-load-balancer"}, {"max": "100", "name": "rules-per-application-load-balancer"}, {"max": "20", "name": "network-load-balancers"}, {"__truncated_len": 3}]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc822653-7ebb-453f-9a8f-c718cbdc7543", "record_id": "flaws_cloudtrail:0000137:dc822653-7ebb-453f-9a8f-c718cbdc7543", "row_index": 137, "timestamp": "2018-12-19T23:14:05Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc822653-7ebb-453f-9a8f-c718cbdc7543", "eventTime": "2018-12-19T23:14:05Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"targetGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd90cbb-d39a-4434-933d-96b47a698aba", "record_id": "flaws_cloudtrail:0000138:8bd90cbb-d39a-4434-933d-96b47a698aba", "row_index": 138, "timestamp": "2018-12-19T23:14:06Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd90cbb-d39a-4434-933d-96b47a698aba", "eventTime": "2018-12-19T23:14:06Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f3db0f-9300-49d1-a807-7bfcd4e9465a", "record_id": "flaws_cloudtrail:0000139:87f3db0f-9300-49d1-a807-7bfcd4e9465a", "row_index": 139, "timestamp": "2018-12-19T23:14:06Z", "event_type": "ListElasticsearchVersions", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f3db0f-9300-49d1-a807-7bfcd4e9465a", "eventTime": "2018-12-19T23:14:06Z", "eventName": "ListElasticsearchVersions", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: es:ListElasticsearchVersions on resource: arn:aws:es:us-east-1:811596193553:domain/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71910a-0b9c-4225-9f6e-df590878e290", "record_id": "flaws_cloudtrail:0000140:71910a-0b9c-4225-9f6e-df590878e290", "row_index": 140, "timestamp": "2018-12-19T23:14:06Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71910a-0b9c-4225-9f6e-df590878e290", "eventTime": "2018-12-19T23:14:06Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b810133f-9374-4245-809f-4623c30e43be", "record_id": "flaws_cloudtrail:0000141:2b810133f-9374-4245-809f-4623c30e43be", "row_index": 141, "timestamp": "2018-12-19T23:14:06Z", "event_type": "ListSecurityConfigurations", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b810133f-9374-4245-809f-4623c30e43be", "eventTime": "2018-12-19T23:14:06Z", "eventName": "ListSecurityConfigurations", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: elasticmapreduce:ListSecurityConfigurations on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8749ff26-e87b-4d58-89dc-927772ef0f63", "record_id": "flaws_cloudtrail:0000142:8749ff26-e87b-4d58-89dc-927772ef0f63", "row_index": 142, "timestamp": "2018-12-19T23:14:07Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8749ff26-e87b-4d58-89dc-927772ef0f63", "eventTime": "2018-12-19T23:14:07Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9869f0eb-fad4-4686-af13-7a4d8d33646", "record_id": "flaws_cloudtrail:0000143:9869f0eb-fad4-4686-af13-7a4d8d33646", "row_index": 143, "timestamp": "2018-12-19T23:14:07Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9869f0eb-fad4-4686-af13-7a4d8d33646", "eventTime": "2018-12-19T23:14:07Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f2df4e2-ca5a-41d1-a8c2-22899b4c3d7", "record_id": "flaws_cloudtrail:0000144:3f2df4e2-ca5a-41d1-a8c2-22899b4c3d7", "row_index": 144, "timestamp": "2018-12-19T23:14:09Z", "event_type": "ListBuilds", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f2df4e2-ca5a-41d1-a8c2-22899b4c3d7", "eventTime": "2018-12-19T23:14:09Z", "eventName": "ListBuilds", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b8dd2d-3e03-4916-8faf-060d9f3a4b12", "record_id": "flaws_cloudtrail:0000145:57b8dd2d-3e03-4916-8faf-060d9f3a4b12", "row_index": 145, "timestamp": "2018-12-19T23:14:09Z", "event_type": "ListPolicies", "event_source": "fms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b8dd2d-3e03-4916-8faf-060d9f3a4b12", "eventTime": "2018-12-19T23:14:09Z", "eventName": "ListPolicies", "eventSource": "fms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Account: 811596193553 is not currently delegated by AWS FM.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4af275230-325b-4643-bea2-c3cb75b33f21", "record_id": "flaws_cloudtrail:0000146:4af275230-325b-4643-bea2-c3cb75b33f21", "row_index": 146, "timestamp": "2018-12-19T23:14:09Z", "event_type": "ListAliases", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4af275230-325b-4643-bea2-c3cb75b33f21", "eventTime": "2018-12-19T23:14:09Z", "eventName": "ListAliases", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: gamelift:ListAliases", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5d8a61b-4632-417b-be72-523f5432a694", "record_id": "flaws_cloudtrail:0000147:f5d8a61b-4632-417b-be72-523f5432a694", "row_index": 147, "timestamp": "2018-12-19T23:14:10Z", "event_type": "DescribeFleetCapacity", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5d8a61b-4632-417b-be72-523f5432a694", "eventTime": "2018-12-19T23:14:10Z", "eventName": "DescribeFleetCapacity", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: gamelift:DescribeFleetCapacity", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba44572-eaaa-4d86-a53b-416315c9e02d", "record_id": "flaws_cloudtrail:0000148:6ba44572-eaaa-4d86-a53b-416315c9e02d", "row_index": 148, "timestamp": "2018-12-19T23:14:10Z", "event_type": "DescribeFleetAttributes", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba44572-eaaa-4d86-a53b-416315c9e02d", "eventTime": "2018-12-19T23:14:10Z", "eventName": "DescribeFleetAttributes", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: gamelift:DescribeFleetAttributes", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63e9e58-e2f5-4160-8f95-b4fb0276c3fa", "record_id": "flaws_cloudtrail:0000149:a63e9e58-e2f5-4160-8f95-b4fb0276c3fa", "row_index": 149, "timestamp": "2018-12-19T23:14:10Z", "event_type": "ListFleets", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63e9e58-e2f5-4160-8f95-b4fb0276c3fa", "eventTime": "2018-12-19T23:14:10Z", "eventName": "ListFleets", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d655f161-2240-4076-90ac-8ba92aeec5b5", "record_id": "flaws_cloudtrail:0000150:d655f161-2240-4076-90ac-8ba92aeec5b5", "row_index": 150, "timestamp": "2018-12-19T23:14:10Z", "event_type": "DescribeEC2InstanceLimits", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d655f161-2240-4076-90ac-8ba92aeec5b5", "eventTime": "2018-12-19T23:14:10Z", "eventName": "DescribeEC2InstanceLimits", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: gamelift:DescribeEC2InstanceLimits", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4502b2a-06e5-4c49-b328-51dca99c3cd3", "record_id": "flaws_cloudtrail:0000151:b4502b2a-06e5-4c49-b328-51dca99c3cd3", "row_index": 151, "timestamp": "2018-12-19T23:14:11Z", "event_type": "DescribeGameSessionQueues", "event_source": "gamelift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4502b2a-06e5-4c49-b328-51dca99c3cd3", "eventTime": "2018-12-19T23:14:11Z", "eventName": "DescribeGameSessionQueues", "eventSource": "gamelift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: gamelift:DescribeGameSessionQueues", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d167f9d1-78d7-4769-bbe1-9227edcee558", "record_id": "flaws_cloudtrail:0000152:d167f9d1-78d7-4769-bbe1-9227edcee558", "row_index": 152, "timestamp": "2018-12-19T23:14:11Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d167f9d1-78d7-4769-bbe1-9227edcee558", "eventTime": "2018-12-19T23:14:11Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9dea1b-bbba-44dd-b166-57b6729def5a", "record_id": "flaws_cloudtrail:0000153:0f9dea1b-bbba-44dd-b166-57b6729def5a", "row_index": 153, "timestamp": "2018-12-19T23:14:12Z", "event_type": "GetDatabases", "event_source": "glue.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9dea1b-bbba-44dd-b166-57b6729def5a", "eventTime": "2018-12-19T23:14:12Z", "eventName": "GetDatabases", "eventSource": "glue.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62045d17-5869-49bd-8792-72002e7e6e72", "record_id": "flaws_cloudtrail:0000154:62045d17-5869-49bd-8792-72002e7e6e72", "row_index": 154, "timestamp": "2018-12-19T23:14:12Z", "event_type": "GetConnections", "event_source": "glue.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62045d17-5869-49bd-8792-72002e7e6e72", "eventTime": "2018-12-19T23:14:12Z", "eventName": "GetConnections", "eventSource": "glue.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"hidePassword": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a60ed0bb-af5f-422d-833d-5a09c859f652", "record_id": "flaws_cloudtrail:0000155:a60ed0bb-af5f-422d-833d-5a09c859f652", "row_index": 155, "timestamp": "2018-12-19T23:14:13Z", "event_type": "ListSubscriptionDefinitions", "event_source": "greengrass.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a60ed0bb-af5f-422d-833d-5a09c859f652", "eventTime": "2018-12-19T23:14:13Z", "eventName": "ListSubscriptionDefinitions", "eventSource": "greengrass.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: greengrass:ListSubscriptionDefinitions on resource: arn:aws:greengrass:us-east-1:811596193553:/greengrass/definition/subscriptions"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25da59d6-ee0a-4722-972d-d3e861f3108f", "record_id": "flaws_cloudtrail:0000156:25da59d6-ee0a-4722-972d-d3e861f3108f", "row_index": 156, "timestamp": "2018-12-19T23:14:13Z", "event_type": "ListLoggerDefinitions", "event_source": "greengrass.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25da59d6-ee0a-4722-972d-d3e861f3108f", "eventTime": "2018-12-19T23:14:13Z", "eventName": "ListLoggerDefinitions", "eventSource": "greengrass.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: greengrass:ListLoggerDefinitions on resource: arn:aws:greengrass:us-east-1:811596193553:/greengrass/definition/loggers"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70daca0a-38e4-4269-8c7b-b3dbd967df4c", "record_id": "flaws_cloudtrail:0000157:70daca0a-38e4-4269-8c7b-b3dbd967df4c", "row_index": 157, "timestamp": "2018-12-19T23:14:13Z", "event_type": "ListGroups", "event_source": "greengrass.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70daca0a-38e4-4269-8c7b-b3dbd967df4c", "eventTime": "2018-12-19T23:14:13Z", "eventName": "ListGroups", "eventSource": "greengrass.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: greengrass:ListGroups on resource: arn:aws:greengrass:us-east-1:811596193553:/greengrass/groups"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3764c3e9-93c3-46e8-b9f4-6274d0e34b2a", "record_id": "flaws_cloudtrail:0000158:3764c3e9-93c3-46e8-b9f4-6274d0e34b2a", "row_index": 158, "timestamp": "2018-12-19T23:14:14Z", "event_type": "ListInvitations", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3764c3e9-93c3-46e8-b9f4-6274d0e34b2a", "eventTime": "2018-12-19T23:14:14Z", "eventName": "ListInvitations", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f75ab513-4552-4b78-9f17-3ac73676b1bd", "record_id": "flaws_cloudtrail:0000159:f75ab513-4552-4b78-9f17-3ac73676b1bd", "row_index": 159, "timestamp": "2018-12-19T23:14:14Z", "event_type": "DescribeEvents", "event_source": "health.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f75ab513-4552-4b78-9f17-3ac73676b1bd", "eventTime": "2018-12-19T23:14:14Z", "eventName": "DescribeEvents", "eventSource": "health.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: health:DescribeEvents on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "448c4af0-7186-419a-826d-766be95f8501", "record_id": "flaws_cloudtrail:0000160:448c4af0-7186-419a-826d-766be95f8501", "row_index": 160, "timestamp": "2018-12-19T23:14:14Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "448c4af0-7186-419a-826d-766be95f8501", "eventTime": "2018-12-19T23:14:14Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243e3acb-6e49-449d-87af-e8229d6786ce", "record_id": "flaws_cloudtrail:0000161:243e3acb-6e49-449d-87af-e8229d6786ce", "row_index": 161, "timestamp": "2018-12-19T23:14:15Z", "event_type": "DescribeEntityAggregates", "event_source": "health.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243e3acb-6e49-449d-87af-e8229d6786ce", "eventTime": "2018-12-19T23:14:15Z", "eventName": "DescribeEntityAggregates", "eventSource": "health.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: health:DescribeEntityAggregates on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63b7128c-53cd-4d5a-86ca-6de2cd129d16", "record_id": "flaws_cloudtrail:0000162:63b7128c-53cd-4d5a-86ca-6de2cd129d16", "row_index": 162, "timestamp": "2018-12-19T23:14:15Z", "event_type": "DescribeEventTypes", "event_source": "health.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63b7128c-53cd-4d5a-86ca-6de2cd129d16", "eventTime": "2018-12-19T23:14:15Z", "eventName": "DescribeEventTypes", "eventSource": "health.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: health:DescribeEventTypes on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3a67cb2-b1ba-4499-813d-07a87f3a76ea", "record_id": "flaws_cloudtrail:0000163:f3a67cb2-b1ba-4499-813d-07a87f3a76ea", "row_index": 163, "timestamp": "2018-12-19T23:14:16Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3a67cb2-b1ba-4499-813d-07a87f3a76ea", "eventTime": "2018-12-19T23:14:16Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d10150-d666-4318-bc64-a8ece3c4f771", "record_id": "flaws_cloudtrail:0000164:c6d10150-d666-4318-bc64-a8ece3c4f771", "row_index": 164, "timestamp": "2018-12-19T23:14:16Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d10150-d666-4318-bc64-a8ece3c4f771", "eventTime": "2018-12-19T23:14:16Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39037a-b20b-46c5-960d-038a359e5db5", "record_id": "flaws_cloudtrail:0000165:39037a-b20b-46c5-960d-038a359e5db5", "row_index": 165, "timestamp": "2018-12-19T23:14:16Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39037a-b20b-46c5-960d-038a359e5db5", "eventTime": "2018-12-19T23:14:16Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ccb994d-098b-4e5f-ae3b-f88c381e4590", "record_id": "flaws_cloudtrail:0000166:5ccb994d-098b-4e5f-ae3b-f88c381e4590", "row_index": 166, "timestamp": "2018-12-19T23:14:16Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ccb994d-098b-4e5f-ae3b-f88c381e4590", "eventTime": "2018-12-19T23:14:16Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ff25609-e651-4b8c-91bd-d34f8474b980", "record_id": "flaws_cloudtrail:0000167:2ff25609-e651-4b8c-91bd-d34f8474b980", "row_index": 167, "timestamp": "2018-12-19T23:14:16Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ff25609-e651-4b8c-91bd-d34f8474b980", "eventTime": "2018-12-19T23:14:16Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abea8ff1-cd60-4712-a605-b528a205925e", "record_id": "flaws_cloudtrail:0000168:abea8ff1-cd60-4712-a605-b528a205925e", "row_index": 168, "timestamp": "2018-12-19T23:14:17Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abea8ff1-cd60-4712-a605-b528a205925e", "eventTime": "2018-12-19T23:14:17Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "CredentialReportNotPresentException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "306b45f9-f719-4157-a156-285a5cbc867d", "record_id": "flaws_cloudtrail:0000169:306b45f9-f719-4157-a156-285a5cbc867d", "row_index": 169, "timestamp": "2018-12-19T23:14:17Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "306b45f9-f719-4157-a156-285a5cbc867d", "eventTime": "2018-12-19T23:14:17Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea208faf-0256-4fcf-99ec-7e7765890391", "record_id": "flaws_cloudtrail:0000170:ea208faf-0256-4fcf-99ec-7e7765890391", "row_index": 170, "timestamp": "2018-12-19T23:14:17Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea208faf-0256-4fcf-99ec-7e7765890391", "eventTime": "2018-12-19T23:14:17Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b0dd8b-2ff1-445c-9006-602c2b456dec", "record_id": "flaws_cloudtrail:0000171:f4b0dd8b-2ff1-445c-9006-602c2b456dec", "row_index": 171, "timestamp": "2018-12-19T23:14:20Z", "event_type": "ListFindings", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b0dd8b-2ff1-445c-9006-602c2b456dec", "eventTime": "2018-12-19T23:14:20Z", "eventName": "ListFindings", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListFindings", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc96e92d-11b5-4343-9c11-859fee0704ed", "record_id": "flaws_cloudtrail:0000172:fc96e92d-11b5-4343-9c11-859fee0704ed", "row_index": 172, "timestamp": "2018-12-19T23:14:21Z", "event_type": "ListEventSubscriptions", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc96e92d-11b5-4343-9c11-859fee0704ed", "eventTime": "2018-12-19T23:14:21Z", "eventName": "ListEventSubscriptions", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListEventSubscriptions", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c550874-4870-4ba2-a27d-bc3897af5a68", "record_id": "flaws_cloudtrail:0000173:c550874-4870-4ba2-a27d-bc3897af5a68", "row_index": 173, "timestamp": "2018-12-19T23:14:21Z", "event_type": "ListAssessmentRuns", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c550874-4870-4ba2-a27d-bc3897af5a68", "eventTime": "2018-12-19T23:14:21Z", "eventName": "ListAssessmentRuns", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListAssessmentRuns", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e6d197-6d5d-41a1-b629-d49db58d4db8", "record_id": "flaws_cloudtrail:0000174:23e6d197-6d5d-41a1-b629-d49db58d4db8", "row_index": 174, "timestamp": "2018-12-19T23:14:22Z", "event_type": "ListAssessmentTargets", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e6d197-6d5d-41a1-b629-d49db58d4db8", "eventTime": "2018-12-19T23:14:22Z", "eventName": "ListAssessmentTargets", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListAssessmentTargets", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e714332-b05f-433f-9644-ba359504de7ca", "record_id": "flaws_cloudtrail:0000175:86e714332-b05f-433f-9644-ba359504de7ca", "row_index": 175, "timestamp": "2018-12-19T23:14:22Z", "event_type": "ListCertificates", "event_source": "iot.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVNZAY5JKSV0K4P5T", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "apigateway.amazonaws.com", "user_agent": "apigateway.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e714332-b05f-433f-9644-ba359504de7ca", "eventTime": "2018-12-19T23:14:22Z", "eventName": "ListCertificates", "eventSource": "iot.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "apigateway.amazonaws.com", "userAgent": "apigateway.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iot:ListCertificates on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVNZAY5JKSV0K4P5T", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:14:22Z"}}, "invokedBy": "apigateway.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b61a5b6-16b9-4d0a-972b-0cde8c627241", "record_id": "flaws_cloudtrail:0000176:6b61a5b6-16b9-4d0a-972b-0cde8c627241", "row_index": 176, "timestamp": "2018-12-19T23:14:22Z", "event_type": "ListPolicies", "event_source": "iot.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVNZAY5JKSV0K4P5T", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "apigateway.amazonaws.com", "user_agent": "apigateway.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b61a5b6-16b9-4d0a-972b-0cde8c627241", "eventTime": "2018-12-19T23:14:22Z", "eventName": "ListPolicies", "eventSource": "iot.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "apigateway.amazonaws.com", "userAgent": "apigateway.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iot:ListPolicies on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVNZAY5JKSV0K4P5T", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:14:22Z"}}, "invokedBy": "apigateway.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbb5f38-b9c3-4597-9b5c-a5fe56f45e63", "record_id": "flaws_cloudtrail:0000177:ebbb5f38-b9c3-4597-9b5c-a5fe56f45e63", "row_index": 177, "timestamp": "2018-12-19T23:14:22Z", "event_type": "ListThings", "event_source": "iot.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVNZAY5JKSV0K4P5T", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "apigateway.amazonaws.com", "user_agent": "apigateway.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbb5f38-b9c3-4597-9b5c-a5fe56f45e63", "eventTime": "2018-12-19T23:14:22Z", "eventName": "ListThings", "eventSource": "iot.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "apigateway.amazonaws.com", "userAgent": "apigateway.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVNZAY5JKSV0K4P5T", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:14:22Z"}}, "invokedBy": "apigateway.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f995d6-d88b-4c51-a483-ffa4a6354e1a", "record_id": "flaws_cloudtrail:0000178:47f995d6-d88b-4c51-a483-ffa4a6354e1a", "row_index": 178, "timestamp": "2018-12-19T23:14:23Z", "event_type": "ListStreams", "event_source": "kinesis.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f995d6-d88b-4c51-a483-ffa4a6354e1a", "eventTime": "2018-12-19T23:14:23Z", "eventName": "ListStreams", "eventSource": "kinesis.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa731cc-4490-4c70-b59a-7355d1110187", "record_id": "flaws_cloudtrail:0000179:eaa731cc-4490-4c70-b59a-7355d1110187", "row_index": 179, "timestamp": "2018-12-19T23:14:24Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa731cc-4490-4c70-b59a-7355d1110187", "eventTime": "2018-12-19T23:14:24Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677898c-52ae-4307-bbbc-f680f5e1bb5f", "record_id": "flaws_cloudtrail:0000180:677898c-52ae-4307-bbbc-f680f5e1bb5f", "row_index": 180, "timestamp": "2018-12-19T23:14:24Z", "event_type": "ListAliases", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677898c-52ae-4307-bbbc-f680f5e1bb5f", "eventTime": "2018-12-19T23:14:24Z", "eventName": "ListAliases", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186993-b21e-4d2f-8377-8cddfd0622d2", "record_id": "flaws_cloudtrail:0000181:186993-b21e-4d2f-8377-8cddfd0622d2", "row_index": 181, "timestamp": "2018-12-19T23:14:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186993-b21e-4d2f-8377-8cddfd0622d2", "eventTime": "2018-12-19T23:14:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c1fbf46-5a4f-45fd-88f3-d26150dce3", "record_id": "flaws_cloudtrail:0000182:0c1fbf46-5a4f-45fd-88f3-d26150dce3", "row_index": 182, "timestamp": "2018-12-19T23:14:25Z", "event_type": "ListEventSourceMappings202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c1fbf46-5a4f-45fd-88f3-d26150dce3", "eventTime": "2018-12-19T23:14:25Z", "eventName": "ListEventSourceMappings202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:ListEventSourceMappings on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ebb5c99-b538-4a16-9d1a-8550f5ca120f", "record_id": "flaws_cloudtrail:0000183:2ebb5c99-b538-4a16-9d1a-8550f5ca120f", "row_index": 183, "timestamp": "2018-12-19T23:14:26Z", "event_type": "GetIntents", "event_source": "lex.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ebb5c99-b538-4a16-9d1a-8550f5ca120f", "eventTime": "2018-12-19T23:14:26Z", "eventName": "GetIntents", "eventSource": "lex.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lex:GetIntents on resource: arn:aws:lex:us-east-1:811596193553:intent:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26da8960-9817-4458-9497-e8de74ddf628", "record_id": "flaws_cloudtrail:0000184:26da8960-9817-4458-9497-e8de74ddf628", "row_index": 184, "timestamp": "2018-12-19T23:14:26Z", "event_type": "GetBots", "event_source": "lex.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26da8960-9817-4458-9497-e8de74ddf628", "eventTime": "2018-12-19T23:14:26Z", "eventName": "GetBots", "eventSource": "lex.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lex:GetBots on resource: arn:aws:lex:us-east-1:811596193553:bot:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f00089-4397-481d-a72b-b366d7ca2010", "record_id": "flaws_cloudtrail:0000185:0f00089-4397-481d-a72b-b366d7ca2010", "row_index": 185, "timestamp": "2018-12-19T23:14:27Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f00089-4397-481d-a72b-b366d7ca2010", "eventTime": "2018-12-19T23:14:27Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "335a2e86-13b7-4801-bfca-faf46bf53f56", "record_id": "flaws_cloudtrail:0000186:335a2e86-13b7-4801-bfca-faf46bf53f56", "row_index": 186, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetOperations", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "335a2e86-13b7-4801-bfca-faf46bf53f56", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetOperations", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetOperations on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95044aa-971f-4cc1-bc5e-36809be7605a", "record_id": "flaws_cloudtrail:0000187:95044aa-971f-4cc1-bc5e-36809be7605a", "row_index": 187, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetRegions", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95044aa-971f-4cc1-bc5e-36809be7605a", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetRegions", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetRegions on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8f3ea9f-78ab-433d-8359-b42a92a770f6", "record_id": "flaws_cloudtrail:0000188:f8f3ea9f-78ab-433d-8359-b42a92a770f6", "row_index": 188, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetDomains", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8f3ea9f-78ab-433d-8359-b42a92a770f6", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetDomains", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetDomains on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce8c877-e097-4e76-b6fd-2235ce1d1496", "record_id": "flaws_cloudtrail:0000189:cce8c877-e097-4e76-b6fd-2235ce1d1496", "row_index": 189, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetBundles", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce8c877-e097-4e76-b6fd-2235ce1d1496", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetBundles", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetBundles on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cf97be2-93cd-49b1-a43b-e5392d1826cf", "record_id": "flaws_cloudtrail:0000190:0cf97be2-93cd-49b1-a43b-e5392d1826cf", "row_index": 190, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cf97be2-93cd-49b1-a43b-e5392d1826cf", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4900d2a-9f8a-437d-bdf5-2cf1771f2822", "record_id": "flaws_cloudtrail:0000191:c4900d2a-9f8a-437d-bdf5-2cf1771f2822", "row_index": 191, "timestamp": "2018-12-19T23:14:27Z", "event_type": "GetKeyPairs", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4900d2a-9f8a-437d-bdf5-2cf1771f2822", "eventTime": "2018-12-19T23:14:27Z", "eventName": "GetKeyPairs", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetKeyPairs on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb1e04c-2cd5-44dc-a53c-873e6d562dd2", "record_id": "flaws_cloudtrail:0000192:6cb1e04c-2cd5-44dc-a53c-873e6d562dd2", "row_index": 192, "timestamp": "2018-12-19T23:14:28Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb1e04c-2cd5-44dc-a53c-873e6d562dd2", "eventTime": "2018-12-19T23:14:28Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b430cfe-bf64-4fe3-9720-100343ff4e7eb", "record_id": "flaws_cloudtrail:0000193:5b430cfe-bf64-4fe3-9720-100343ff4e7eb", "row_index": 193, "timestamp": "2018-12-19T23:14:28Z", "event_type": "DescribeExportTasks", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b430cfe-bf64-4fe3-9720-100343ff4e7eb", "eventTime": "2018-12-19T23:14:28Z", "eventName": "DescribeExportTasks", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87c922a2-d8c9-48bd-9139-342e44ca957c", "record_id": "flaws_cloudtrail:0000194:87c922a2-d8c9-48bd-9139-342e44ca957c", "row_index": 194, "timestamp": "2018-12-19T23:14:29Z", "event_type": "ListQueues", "event_source": "mediaconvert.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87c922a2-d8c9-48bd-9139-342e44ca957c", "eventTime": "2018-12-19T23:14:29Z", "eventName": "ListQueues", "eventSource": "mediaconvert.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mediaconvert:ListQueues on resource: arn:aws:mediaconvert:us-east-1:811596193553:queues/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0b25f3d-8e9f-4733-92ce-bbba8cd86fd1", "record_id": "flaws_cloudtrail:0000195:f0b25f3d-8e9f-4733-92ce-bbba8cd86fd1", "row_index": 195, "timestamp": "2018-12-19T23:14:29Z", "event_type": "ListPresets", "event_source": "mediaconvert.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0b25f3d-8e9f-4733-92ce-bbba8cd86fd1", "eventTime": "2018-12-19T23:14:29Z", "eventName": "ListPresets", "eventSource": "mediaconvert.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mediaconvert:ListPresets on resource: arn:aws:mediaconvert:us-east-1:811596193553:presets/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c761d4-4979-42ec-bc2e-8382aa2314cb", "record_id": "flaws_cloudtrail:0000196:16c761d4-4979-42ec-bc2e-8382aa2314cb", "row_index": 196, "timestamp": "2018-12-19T23:14:29Z", "event_type": "ListJobs", "event_source": "mediaconvert.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c761d4-4979-42ec-bc2e-8382aa2314cb", "eventTime": "2018-12-19T23:14:29Z", "eventName": "ListJobs", "eventSource": "mediaconvert.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mediaconvert:ListJobs on resource: arn:aws:mediaconvert:us-east-1:811596193553:jobs/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f4304c4-2340-412a-83b6-db556bb0971b", "record_id": "flaws_cloudtrail:0000197:1f4304c4-2340-412a-83b6-db556bb0971b", "row_index": 197, "timestamp": "2018-12-19T23:14:29Z", "event_type": "ListJobTemplates", "event_source": "mediaconvert.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 905, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f4304c4-2340-412a-83b6-db556bb0971b", "eventTime": "2018-12-19T23:14:29Z", "eventName": "ListJobTemplates", "eventSource": "mediaconvert.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mediaconvert:ListJobTemplates on resource: arn:aws:mediaconvert:us-east-1:811596193553:jobTemplates/*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db36241-ab85-48e6-9fea-0e57970225cb", "record_id": "flaws_cloudtrail:0000198:4db36241-ab85-48e6-9fea-0e57970225cb", "row_index": 198, "timestamp": "2018-12-19T23:14:30Z", "event_type": "ListContainers", "event_source": "mediastore.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db36241-ab85-48e6-9fea-0e57970225cb", "eventTime": "2018-12-19T23:14:30Z", "eventName": "ListContainers", "eventSource": "mediastore.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e688b9dd-5d78-4e6d-bf55-94f0e9b26110", "record_id": "flaws_cloudtrail:0000199:e688b9dd-5d78-4e6d-bf55-94f0e9b26110", "row_index": 199, "timestamp": "2018-12-19T23:14:40Z", "event_type": "ListProgressUpdateStreams", "event_source": "migrationhub.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e688b9dd-5d78-4e6d-bf55-94f0e9b26110", "eventTime": "2018-12-19T23:14:40Z", "eventName": "ListProgressUpdateStreams", "eventSource": "migrationhub.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mgh:ListProgressUpdateStreams on resource: arn:aws:mgh:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e944d955-5300-44d9-af5e-6440f38fade1", "record_id": "flaws_cloudtrail:0000200:e944d955-5300-44d9-af5e-6440f38fade1", "row_index": 200, "timestamp": "2018-12-19T23:14:40Z", "event_type": "ListMigrationTasks", "event_source": "migrationhub.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e944d955-5300-44d9-af5e-6440f38fade1", "eventTime": "2018-12-19T23:14:40Z", "eventName": "ListMigrationTasks", "eventSource": "migrationhub.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mgh:ListMigrationTasks on resource: arn:aws:mgh:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a3e6489-4349-4b79-bc70-658707c18ca6", "record_id": "flaws_cloudtrail:0000201:3a3e6489-4349-4b79-bc70-658707c18ca6", "row_index": 201, "timestamp": "2018-12-19T23:14:41Z", "event_type": "ListConfigurations", "event_source": "amazonmq.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a3e6489-4349-4b79-bc70-658707c18ca6", "eventTime": "2018-12-19T23:14:41Z", "eventName": "ListConfigurations", "eventSource": "amazonmq.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mq:ListConfigurations on resource: arn:aws:mq:us-east-1:811596193553:*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d575684f-fd81-41a6-8c8b-05ff5ba7867f", "record_id": "flaws_cloudtrail:0000202:3d575684f-fd81-41a6-8c8b-05ff5ba7867f", "row_index": 202, "timestamp": "2018-12-19T23:14:41Z", "event_type": "ListBrokers", "event_source": "amazonmq.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d575684f-fd81-41a6-8c8b-05ff5ba7867f", "eventTime": "2018-12-19T23:14:41Z", "eventName": "ListBrokers", "eventSource": "amazonmq.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: mq:ListBrokers on resource: arn:aws:mq:us-east-1:811596193553:*"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8edd4be4-813d-4ce5-a1c0-ef1bda0ebbf5", "record_id": "flaws_cloudtrail:0000203:8edd4be4-813d-4ce5-a1c0-ef1bda0ebbf5", "row_index": 203, "timestamp": "2018-12-19T23:14:43Z", "event_type": "DescribeUserProfiles", "event_source": "opsworks.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8edd4be4-813d-4ce5-a1c0-ef1bda0ebbf5", "eventTime": "2018-12-19T23:14:43Z", "eventName": "DescribeUserProfiles", "eventSource": "opsworks.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1bed0f6-dcbd-4257-8e83-c95d489220c8", "record_id": "flaws_cloudtrail:0000204:f1bed0f6-dcbd-4257-8e83-c95d489220c8", "row_index": 204, "timestamp": "2018-12-19T23:14:43Z", "event_type": "DescribeStacks", "event_source": "opsworks.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1bed0f6-dcbd-4257-8e83-c95d489220c8", "eventTime": "2018-12-19T23:14:43Z", "eventName": "DescribeStacks", "eventSource": "opsworks.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049405d17-215e-450b-8731-2cebf323ad5f", "record_id": "flaws_cloudtrail:0000205:049405d17-215e-450b-8731-2cebf323ad5f", "row_index": 205, "timestamp": "2018-12-19T23:14:45Z", "event_type": "DescribeOrganization", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049405d17-215e-450b-8731-2cebf323ad5f", "eventTime": "2018-12-19T23:14:45Z", "eventName": "DescribeOrganization", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee282c38-dd7d-4f59-9968-ff0b05599", "record_id": "flaws_cloudtrail:0000206:ee282c38-dd7d-4f59-9968-ff0b05599", "row_index": 206, "timestamp": "2018-12-19T23:14:45Z", "event_type": "DescribeServers", "event_source": "opsworks-cm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee282c38-dd7d-4f59-9968-ff0b05599", "eventTime": "2018-12-19T23:14:45Z", "eventName": "DescribeServers", "eventSource": "opsworks-cm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f14bcde4-49f2-44c9-b2e8-00fd0b54b387", "record_id": "flaws_cloudtrail:0000207:f14bcde4-49f2-44c9-b2e8-00fd0b54b387", "row_index": 207, "timestamp": "2018-12-19T23:14:47Z", "event_type": "ListHandshakesForAccount", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f14bcde4-49f2-44c9-b2e8-00fd0b54b387", "eventTime": "2018-12-19T23:14:47Z", "eventName": "ListHandshakesForAccount", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f72f86-7d50-4600-9996-85c9ba503317", "record_id": "flaws_cloudtrail:0000208:81f72f86-7d50-4600-9996-85c9ba503317", "row_index": 208, "timestamp": "2018-12-19T23:14:48Z", "event_type": "ListLexicons", "event_source": "polly.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f72f86-7d50-4600-9996-85c9ba503317", "eventTime": "2018-12-19T23:14:48Z", "eventName": "ListLexicons", "eventSource": "polly.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: polly:ListLexicons", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e211454-9ef5-40a5-9d4f-039990ec7b92", "record_id": "flaws_cloudtrail:0000209:e211454-9ef5-40a5-9d4f-039990ec7b92", "row_index": 209, "timestamp": "2018-12-19T23:14:48Z", "event_type": "DescribeVoices", "event_source": "polly.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e211454-9ef5-40a5-9d4f-039990ec7b92", "eventTime": "2018-12-19T23:14:48Z", "eventName": "DescribeVoices", "eventSource": "polly.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: polly:DescribeVoices", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2ab7bb7-87f1-4205-8e94-f48c656ab4c7", "record_id": "flaws_cloudtrail:0000210:f2ab7bb7-87f1-4205-8e94-f48c656ab4c7", "row_index": 210, "timestamp": "2018-12-19T23:14:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2ab7bb7-87f1-4205-8e94-f48c656ab4c7", "eventTime": "2018-12-19T23:14:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a20980-5742-4781-acba-fbd6532813d9", "record_id": "flaws_cloudtrail:0000211:a20980-5742-4781-acba-fbd6532813d9", "row_index": 211, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a20980-5742-4781-acba-fbd6532813d9", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00c3ecf8-cd9a-4d88-9634-8d9c7d7a1bba", "record_id": "flaws_cloudtrail:0000212:00c3ecf8-cd9a-4d88-9634-8d9c7d7a1bba", "row_index": 212, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00c3ecf8-cd9a-4d88-9634-8d9c7d7a1bba", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf8d73d8-cbc0-499f-a4f5-161072c5dc331", "record_id": "flaws_cloudtrail:0000213:bf8d73d8-cbc0-499f-a4f5-161072c5dc331", "row_index": 213, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeEvents", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf8d73d8-cbc0-499f-a4f5-161072c5dc331", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeEvents", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a3cdd8-059d-47f0-afc1-5397e9c15913", "record_id": "flaws_cloudtrail:0000214:99a3cdd8-059d-47f0-afc1-5397e9c15913", "row_index": 214, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a3cdd8-059d-47f0-afc1-5397e9c15913", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120c2313-f946-48c9-991d-0ec76cb82819", "record_id": "flaws_cloudtrail:0000215:120c2313-f946-48c9-991d-0ec76cb82819", "row_index": 215, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeReservedDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120c2313-f946-48c9-991d-0ec76cb82819", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeReservedDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14a37cec-e92b-4d52-8ba1-436254f8e3a5d", "record_id": "flaws_cloudtrail:0000216:14a37cec-e92b-4d52-8ba1-436254f8e3a5d", "row_index": 216, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14a37cec-e92b-4d52-8ba1-436254f8e3a5d", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1421b57-ba0e-42c1-9e6a-a6a9ae577fd1", "record_id": "flaws_cloudtrail:0000217:e1421b57-ba0e-42c1-9e6a-a6a9ae577fd1", "row_index": 217, "timestamp": "2018-12-19T23:14:50Z", "event_type": "DescribeAccountAttributes", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1421b57-ba0e-42c1-9e6a-a6a9ae577fd1", "eventTime": "2018-12-19T23:14:50Z", "eventName": "DescribeAccountAttributes", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb2ec96-cad9-430f-8b77-1053e63be4e7", "record_id": "flaws_cloudtrail:0000218:eeb2ec96-cad9-430f-8b77-1053e63be4e7", "row_index": 218, "timestamp": "2018-12-19T23:14:51Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb2ec96-cad9-430f-8b77-1053e63be4e7", "eventTime": "2018-12-19T23:14:51Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be953209-ccf4-4ca6-9417-092c366243f", "record_id": "flaws_cloudtrail:0000219:7be953209-ccf4-4ca6-9417-092c366243f", "row_index": 219, "timestamp": "2018-12-19T23:14:51Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be953209-ccf4-4ca6-9417-092c366243f", "eventTime": "2018-12-19T23:14:51Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6192ace-aeac-4394-a501-9537adf25c85", "record_id": "flaws_cloudtrail:0000220:e6192ace-aeac-4394-a501-9537adf25c85", "row_index": 220, "timestamp": "2018-12-19T23:14:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6192ace-aeac-4394-a501-9537adf25c85", "eventTime": "2018-12-19T23:14:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKXL23RIUDD9GMCO2", "expiration": "Dec 20, 2018 5:22:38 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d27374-a376-4060-a407-b0d6fd4c2d21", "record_id": "flaws_cloudtrail:0000221:e8d27374-a376-4060-a407-b0d6fd4c2d21", "row_index": 221, "timestamp": "2018-12-19T23:14:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d27374-a376-4060-a407-b0d6fd4c2d21", "eventTime": "2018-12-19T23:14:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37b06da-b4dc-46d6-902a-05022e017ffc", "record_id": "flaws_cloudtrail:0000222:f37b06da-b4dc-46d6-902a-05022e017ffc", "row_index": 222, "timestamp": "2018-12-19T23:14:52Z", "event_type": "DescribeHsmConfigurations", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37b06da-b4dc-46d6-902a-05022e017ffc", "eventTime": "2018-12-19T23:14:52Z", "eventName": "DescribeHsmConfigurations", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"hsmConfigurations": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d07a1e1-4d4f-415a-880b-5b0ca19e89cd", "record_id": "flaws_cloudtrail:0000223:4d07a1e1-4d4f-415a-880b-5b0ca19e89cd", "row_index": 223, "timestamp": "2018-12-19T23:14:52Z", "event_type": "DescribeEvents", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d07a1e1-4d4f-415a-880b-5b0ca19e89cd", "eventTime": "2018-12-19T23:14:52Z", "eventName": "DescribeEvents", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"events": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd90094-2dbe-40d0-8964-18f42d01db3c", "record_id": "flaws_cloudtrail:0000224:2fd90094-2dbe-40d0-8964-18f42d01db3c", "row_index": 224, "timestamp": "2018-12-19T23:14:52Z", "event_type": "DescribeClusterSnapshots", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd90094-2dbe-40d0-8964-18f42d01db3c", "eventTime": "2018-12-19T23:14:52Z", "eventName": "DescribeClusterSnapshots", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"snapshots": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d77b604c-7f1e-4e3d-a972-6f5acb575e2e", "record_id": "flaws_cloudtrail:0000225:d77b604c-7f1e-4e3d-a972-6f5acb575e2e", "row_index": 225, "timestamp": "2018-12-19T23:14:52Z", "event_type": "ListCollections", "event_source": "rekognition.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d77b604c-7f1e-4e3d-a972-6f5acb575e2e", "eventTime": "2018-12-19T23:14:52Z", "eventName": "ListCollections", "eventSource": "rekognition.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b73bc84-9aac-4d55-b2f8-4fbaff64b534", "record_id": "flaws_cloudtrail:0000226:3b73bc84-9aac-4d55-b2f8-4fbaff64b534", "row_index": 226, "timestamp": "2018-12-19T23:14:53Z", "event_type": "ListGroups", "event_source": "resource-groups.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b73bc84-9aac-4d55-b2f8-4fbaff64b534", "eventTime": "2018-12-19T23:14:53Z", "eventName": "ListGroups", "eventSource": "resource-groups.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: resource-groups:ListGroups on resource: arn:aws:resource-groups:us-east-1:811596193553:/groups"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abcee273-32cd-4bca-84d8-658b775311bbc", "record_id": "flaws_cloudtrail:0000227:abcee273-32cd-4bca-84d8-658b775311bbc", "row_index": 227, "timestamp": "2018-12-19T23:14:54Z", "event_type": "ListHostedZonesByName", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abcee273-32cd-4bca-84d8-658b775311bbc", "eventTime": "2018-12-19T23:14:54Z", "eventName": "ListHostedZonesByName", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36a70c3-3d05-4c3e-b0d2-48ad54896f9", "record_id": "flaws_cloudtrail:0000228:b36a70c3-3d05-4c3e-b0d2-48ad54896f9", "row_index": 228, "timestamp": "2018-12-19T23:14:54Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36a70c3-3d05-4c3e-b0d2-48ad54896f9", "eventTime": "2018-12-19T23:14:54Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfdcb2e6-39db-47ac-bbd9-69d87364d", "record_id": "flaws_cloudtrail:0000229:dfdcb2e6-39db-47ac-bbd9-69d87364d", "row_index": 229, "timestamp": "2018-12-19T23:14:54Z", "event_type": "ListHealthChecks", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfdcb2e6-39db-47ac-bbd9-69d87364d", "eventTime": "2018-12-19T23:14:54Z", "eventName": "ListHealthChecks", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3622a18d-d921-4534-9bc2-d8fe6e40afce", "record_id": "flaws_cloudtrail:0000230:3622a18d-d921-4534-9bc2-d8fe6e40afce", "row_index": 230, "timestamp": "2018-12-19T23:14:54Z", "event_type": "ListGeoLocations", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3622a18d-d921-4534-9bc2-d8fe6e40afce", "eventTime": "2018-12-19T23:14:54Z", "eventName": "ListGeoLocations", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa013ae8-a66a-4073-9d0d-9206f4868614", "record_id": "flaws_cloudtrail:0000231:aa013ae8-a66a-4073-9d0d-9206f4868614", "row_index": 231, "timestamp": "2018-12-19T23:14:55Z", "event_type": "ListOperations", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAUL2EQTO1Z93Q41FZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa013ae8-a66a-4073-9d0d-9206f4868614", "eventTime": "2018-12-19T23:14:55Z", "eventName": "ListOperations", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAUL2EQTO1Z93Q41FZ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:14:55Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5d0889-2445-4a38-a2e6-ff968f8e1deb", "record_id": "flaws_cloudtrail:0000232:2d5d0889-2445-4a38-a2e6-ff968f8e1deb", "row_index": 232, "timestamp": "2018-12-19T23:14:55Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAGHW42JI7BRH3PAAK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5d0889-2445-4a38-a2e6-ff968f8e1deb", "eventTime": "2018-12-19T23:14:55Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAGHW42JI7BRH3PAAK", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T23:14:55Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0df6f21-79d5-42a8-9898-e6691f1e6645", "record_id": "flaws_cloudtrail:0000233:f0df6f21-79d5-42a8-9898-e6691f1e6645", "row_index": 233, "timestamp": "2018-12-19T23:14:55Z", "event_type": "ListTrafficPolicies", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0df6f21-79d5-42a8-9898-e6691f1e6645", "eventTime": "2018-12-19T23:14:55Z", "eventName": "ListTrafficPolicies", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0588c840-939c-41b2-b380-bf623cfe332d", "record_id": "flaws_cloudtrail:0000234:0588c840-939c-41b2-b380-bf623cfe332d", "row_index": 234, "timestamp": "2018-12-19T23:14:56Z", "event_type": "ListEndpointConfigs", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0588c840-939c-41b2-b380-bf623cfe332d", "eventTime": "2018-12-19T23:14:56Z", "eventName": "ListEndpointConfigs", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f805fb-d909-48bf-bfe7-5bf2a843aa81", "record_id": "flaws_cloudtrail:0000235:f0f805fb-d909-48bf-bfe7-5bf2a843aa81", "row_index": 235, "timestamp": "2018-12-19T23:14:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "[Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 638, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f805fb-d909-48bf-bfe7-5bf2a843aa81", "eventTime": "2018-12-19T23:14:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "[Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c255601e-dab9-479d-a3bd-5ca29393c4b7", "record_id": "flaws_cloudtrail:0000236:c255601e-dab9-479d-a3bd-5ca29393c4b7", "row_index": 236, "timestamp": "2018-12-19T23:14:57Z", "event_type": "ListEndpoints", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c255601e-dab9-479d-a3bd-5ca29393c4b7", "eventTime": "2018-12-19T23:14:57Z", "eventName": "ListEndpoints", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c01c8f7-de32-4c59-9b0d-5f1ddff196b4", "record_id": "flaws_cloudtrail:0000237:9c01c8f7-de32-4c59-9b0d-5f1ddff196b4", "row_index": 237, "timestamp": "2018-12-19T23:14:57Z", "event_type": "ListModels", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c01c8f7-de32-4c59-9b0d-5f1ddff196b4", "eventTime": "2018-12-19T23:14:57Z", "eventName": "ListModels", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6885bfef-cdfa-4464-8e08-76262c6bbc0", "record_id": "flaws_cloudtrail:0000238:6885bfef-cdfa-4464-8e08-76262c6bbc0", "row_index": 238, "timestamp": "2018-12-19T23:14:57Z", "event_type": "ListTrainingJobs", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6885bfef-cdfa-4464-8e08-76262c6bbc0", "eventTime": "2018-12-19T23:14:57Z", "eventName": "ListTrainingJobs", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e17fb022-efda-4ec8-b054-8c0d4f42e6a2", "record_id": "flaws_cloudtrail:0000239:e17fb022-efda-4ec8-b054-8c0d4f42e6a2", "row_index": 239, "timestamp": "2018-12-19T23:14:57Z", "event_type": "ListNotebookInstances", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e17fb022-efda-4ec8-b054-8c0d4f42e6a2", "eventTime": "2018-12-19T23:14:57Z", "eventName": "ListNotebookInstances", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e625e5-8827-4d46-814a-fad915947671", "record_id": "flaws_cloudtrail:0000240:25e625e5-8827-4d46-814a-fad915947671", "row_index": 240, "timestamp": "2018-12-19T23:14:57Z", "event_type": "ListNotebookInstanceLifecycleConfigs", "event_source": "sagemaker.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e625e5-8827-4d46-814a-fad915947671", "eventTime": "2018-12-19T23:14:57Z", "eventName": "ListNotebookInstanceLifecycleConfigs", "eventSource": "sagemaker.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d946aa2-8eb1-4ecc-b077-08d5954bdfde", "record_id": "flaws_cloudtrail:0000241:6d946aa2-8eb1-4ecc-b077-08d5954bdfde", "row_index": 241, "timestamp": "2018-12-19T23:14:58Z", "event_type": "ListSecrets", "event_source": "secretsmanager.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d946aa2-8eb1-4ecc-b077-08d5954bdfde", "eventTime": "2018-12-19T23:14:58Z", "eventName": "ListSecrets", "eventSource": "secretsmanager.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "a5bd:f139:0cb4:7219:8e69:83ba:01ea:0394", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: secretsmanager:ListSecrets", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe1d667-2358-4bb5-8ce8-5d049412b8", "record_id": "flaws_cloudtrail:0000242:ffe1d667-2358-4bb5-8ce8-5d049412b8", "row_index": 242, "timestamp": "2018-12-19T23:14:59Z", "event_type": "ListApplications", "event_source": "serverlessrepo.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe1d667-2358-4bb5-8ce8-5d049412b8", "eventTime": "2018-12-19T23:14:59Z", "eventName": "ListApplications", "eventSource": "serverlessrepo.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a936b45f-c28a-4315-90de-205f8f118bc9", "record_id": "flaws_cloudtrail:0000243:a936b45f-c28a-4315-90de-205f8f118bc9", "row_index": 243, "timestamp": "2018-12-19T23:15:00Z", "event_type": "ListPortfolios", "event_source": "servicecatalog.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a936b45f-c28a-4315-90de-205f8f118bc9", "eventTime": "2018-12-19T23:15:00Z", "eventName": "ListPortfolios", "eventSource": "servicecatalog.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: servicecatalog:ListPortfolios on resource: arn:aws:servicecatalog:us-east-1:811596193553:*/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a50cfbb-e284-4440-9a6a-91d7f7fffe1a", "record_id": "flaws_cloudtrail:0000244:0a50cfbb-e284-4440-9a6a-91d7f7fffe1a", "row_index": 244, "timestamp": "2018-12-19T23:15:00Z", "event_type": "ListAcceptedPortfolioShares", "event_source": "servicecatalog.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 908, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a50cfbb-e284-4440-9a6a-91d7f7fffe1a", "eventTime": "2018-12-19T23:15:00Z", "eventName": "ListAcceptedPortfolioShares", "eventSource": "servicecatalog.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: servicecatalog:ListAcceptedPortfolioShares on resource: arn:aws:servicecatalog:us-east-1:811596193553:*/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1f7ef2-2439-4f75-a7f5-2c1897ca602a", "record_id": "flaws_cloudtrail:0000245:fd1f7ef2-2439-4f75-a7f5-2c1897ca602a", "row_index": 245, "timestamp": "2018-12-19T23:15:00Z", "event_type": "ListRecordHistory", "event_source": "servicecatalog.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 888, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1f7ef2-2439-4f75-a7f5-2c1897ca602a", "eventTime": "2018-12-19T23:15:00Z", "eventName": "ListRecordHistory", "eventSource": "servicecatalog.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: servicecatalog:ListRecordHistory on resource: arn:aws:servicecatalog:us-east-1:811596193553:*/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "608bf99d-08bd-4dbb-8799-60360ad8b126", "record_id": "flaws_cloudtrail:0000246:608bf99d-08bd-4dbb-8799-60360ad8b126", "row_index": 246, "timestamp": "2018-12-19T23:15:01Z", "event_type": "ListServices", "event_source": "servicediscovery.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "608bf99d-08bd-4dbb-8799-60360ad8b126", "eventTime": "2018-12-19T23:15:01Z", "eventName": "ListServices", "eventSource": "servicediscovery.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: servicediscovery:ListServices", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a23512c-e769-45db-a1d2-b09008", "record_id": "flaws_cloudtrail:0000247:a23512c-e769-45db-a1d2-b09008", "row_index": 247, "timestamp": "2018-12-19T23:15:01Z", "event_type": "ListConfigurationSets", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a23512c-e769-45db-a1d2-b09008", "eventTime": "2018-12-19T23:15:01Z", "eventName": "ListConfigurationSets", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: ses:ListConfigurationSets", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eb5842a-1511-4355-acf7-fd57d946a9d0", "record_id": "flaws_cloudtrail:0000248:9eb5842a-1511-4355-acf7-fd57d946a9d0", "row_index": 248, "timestamp": "2018-12-19T23:15:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eb5842a-1511-4355-acf7-fd57d946a9d0", "eventTime": "2018-12-19T23:15:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07edc56e-86ab-4062-ac62-0c05f6779b5a", "record_id": "flaws_cloudtrail:0000249:07edc56e-86ab-4062-ac62-0c05f6779b5a", "row_index": 249, "timestamp": "2018-12-19T23:15:01Z", "event_type": "GetSendStatistics", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07edc56e-86ab-4062-ac62-0c05f6779b5a", "eventTime": "2018-12-19T23:15:01Z", "eventName": "GetSendStatistics", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: ses:GetSendStatistics", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c832da3e-e389-4e94-9441-d129223a48d0", "record_id": "flaws_cloudtrail:0000250:c832da3e-e389-4e94-9441-d129223a48d0", "row_index": 250, "timestamp": "2018-12-19T23:15:02Z", "event_type": "ListAttacks", "event_source": "shield.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c832da3e-e389-4e94-9441-d129223a48d0", "eventTime": "2018-12-19T23:15:02Z", "eventName": "ListAttacks", "eventSource": "shield.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a806930d4-ae72-4d58-867b-040bbf384da4", "record_id": "flaws_cloudtrail:0000251:a806930d4-ae72-4d58-867b-040bbf384da4", "row_index": 251, "timestamp": "2018-12-19T23:15:02Z", "event_type": "ListProtections", "event_source": "shield.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a806930d4-ae72-4d58-867b-040bbf384da4", "eventTime": "2018-12-19T23:15:02Z", "eventName": "ListProtections", "eventSource": "shield.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "ResourceNotFoundException", "errorMessage": "The subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52c5d1a5-6ced-41bb-922d-f62a008ffea1", "record_id": "flaws_cloudtrail:0000252:52c5d1a5-6ced-41bb-922d-f62a008ffea1", "row_index": 252, "timestamp": "2018-12-19T23:15:03Z", "event_type": "DescribeSubscription", "event_source": "shield.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52c5d1a5-6ced-41bb-922d-f62a008ffea1", "eventTime": "2018-12-19T23:15:03Z", "eventName": "DescribeSubscription", "eventSource": "shield.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "ResourceNotFoundException", "errorMessage": "The subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5fc3b93-9263-4057-8d36-16dfb0e7a118", "record_id": "flaws_cloudtrail:0000253:d5fc3b93-9263-4057-8d36-16dfb0e7a118", "row_index": 253, "timestamp": "2018-12-19T23:15:05Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5fc3b93-9263-4057-8d36-16dfb0e7a118", "eventTime": "2018-12-19T23:15:05Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "082a6690-c04e-4b91-8e25-6d8bdc948f7d", "record_id": "flaws_cloudtrail:0000254:082a6690-c04e-4b91-8e25-6d8bdc948f7d", "row_index": 254, "timestamp": "2018-12-19T23:15:05Z", "event_type": "ListPhoneNumbersOptedOut", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "082a6690-c04e-4b91-8e25-6d8bdc948f7d", "eventTime": "2018-12-19T23:15:05Z", "eventName": "ListPhoneNumbersOptedOut", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListPhoneNumbersOptedOut on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "029a4b2d-6176-4a4d-a829-221e817cedb3", "record_id": "flaws_cloudtrail:0000255:029a4b2d-6176-4a4d-a829-221e817cedb3", "row_index": 255, "timestamp": "2018-12-19T23:15:05Z", "event_type": "GetSMSAttributes", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "029a4b2d-6176-4a4d-a829-221e817cedb3", "eventTime": "2018-12-19T23:15:05Z", "eventName": "GetSMSAttributes", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:GetSMSAttributes on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f531f46-3e34-4105-98ce-9efcf1f2e395", "record_id": "flaws_cloudtrail:0000256:5f531f46-3e34-4105-98ce-9efcf1f2e395", "row_index": 256, "timestamp": "2018-12-19T23:15:05Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f531f46-3e34-4105-98ce-9efcf1f2e395", "eventTime": "2018-12-19T23:15:05Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955d32e9-1068-4767-acfc-774f1beaf40e", "record_id": "flaws_cloudtrail:0000257:955d32e9-1068-4767-acfc-774f1beaf40e", "row_index": 257, "timestamp": "2018-12-19T23:15:05Z", "event_type": "ListPlatformApplications", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955d32e9-1068-4767-acfc-774f1beaf40e", "eventTime": "2018-12-19T23:15:05Z", "eventName": "ListPlatformApplications", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListPlatformApplications on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707416eb7-2587-4c8e-9d24-198c04f94a0b", "record_id": "flaws_cloudtrail:0000258:707416eb7-2587-4c8e-9d24-198c04f94a0b", "row_index": 258, "timestamp": "2018-12-19T23:15:06Z", "event_type": "DescribeActivations", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707416eb7-2587-4c8e-9d24-198c04f94a0b", "eventTime": "2018-12-19T23:15:06Z", "eventName": "DescribeActivations", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d725661-d77f-442e-b774-97aa0ac71030", "record_id": "flaws_cloudtrail:0000259:0d725661-d77f-442e-b774-97aa0ac71030", "row_index": 259, "timestamp": "2018-12-19T23:15:07Z", "event_type": "ListDocuments", "event_source": "ssm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d725661-d77f-442e-b774-97aa0ac71030", "eventTime": "2018-12-19T23:15:07Z", "eventName": "ListDocuments", "eventSource": "ssm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7091dc9-e61a-40a3-8a0e-e5b07e4ae91e", "record_id": "flaws_cloudtrail:0000260:b7091dc9-e61a-40a3-8a0e-e5b07e4ae91e", "row_index": 260, "timestamp": "2018-12-19T23:15:08Z", "event_type": "ListGateways", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7091dc9-e61a-40a3-8a0e-e5b07e4ae91e", "eventTime": "2018-12-19T23:15:08Z", "eventName": "ListGateways", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35772d5-6366-471f-991e-b56da5836ee8", "record_id": "flaws_cloudtrail:0000261:c35772d5-6366-471f-991e-b56da5836ee8", "row_index": 261, "timestamp": "2018-12-19T23:15:09Z", "event_type": "ListFileShares", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35772d5-6366-471f-991e-b56da5836ee8", "eventTime": "2018-12-19T23:15:09Z", "eventName": "ListFileShares", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4671c9fc-4e9e-4d52-b62c-e5cc66fb1ffb", "record_id": "flaws_cloudtrail:0000262:4671c9fc-4e9e-4d52-b62c-e5cc66fb1ffb", "row_index": 262, "timestamp": "2018-12-19T23:15:10Z", "event_type": "ListTapes", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4671c9fc-4e9e-4d52-b62c-e5cc66fb1ffb", "eventTime": "2018-12-19T23:15:10Z", "eventName": "ListTapes", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f02805-387c-4699-8b31-a6182f611072f", "record_id": "flaws_cloudtrail:0000263:f02805-387c-4699-8b31-a6182f611072f", "row_index": 263, "timestamp": "2018-12-19T23:15:10Z", "event_type": "ListVolumes", "event_source": "storagegateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f02805-387c-4699-8b31-a6182f611072f", "eventTime": "2018-12-19T23:15:10Z", "eventName": "ListVolumes", "eventSource": "storagegateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94594b5d-385f-4caa-a8d3-ddfdc657e6b9", "record_id": "flaws_cloudtrail:0000264:94594b5d-385f-4caa-a8d3-ddfdc657e6b9", "row_index": 264, "timestamp": "2018-12-19T23:15:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94594b5d-385f-4caa-a8d3-ddfdc657e6b9", "eventTime": "2018-12-19T23:15:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "691356be-b867-47c4-9605-84b81a8a8717", "record_id": "flaws_cloudtrail:0000265:691356be-b867-47c4-9605-84b81a8a8717", "row_index": 265, "timestamp": "2018-12-19T23:15:11Z", "event_type": "DescribeServices", "event_source": "support.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "691356be-b867-47c4-9605-84b81a8a8717", "eventTime": "2018-12-19T23:15:11Z", "eventName": "DescribeServices", "eventSource": "support.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: support:", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "341692-5ede-4e76-b59f-5c4544a07e66", "record_id": "flaws_cloudtrail:0000266:341692-5ede-4e76-b59f-5c4544a07e66", "row_index": 266, "timestamp": "2018-12-19T23:15:11Z", "event_type": "DescribeCases", "event_source": "support.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "341692-5ede-4e76-b59f-5c4544a07e66", "eventTime": "2018-12-19T23:15:11Z", "eventName": "DescribeCases", "eventSource": "support.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: support:", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de14f270-4db3-425c-94b5-8c921666f3f31", "record_id": "flaws_cloudtrail:0000267:de14f270-4db3-425c-94b5-8c921666f3f31", "row_index": 267, "timestamp": "2018-12-19T23:15:12Z", "event_type": "ListVocabularies", "event_source": "transcribe.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de14f270-4db3-425c-94b5-8c921666f3f31", "eventTime": "2018-12-19T23:15:12Z", "eventName": "ListVocabularies", "eventSource": "transcribe.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: transcribe:ListVocabularies", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "110ccb57-127b-4eb9-b820-12cf56b226716", "record_id": "flaws_cloudtrail:0000268:110ccb57-127b-4eb9-b820-12cf56b226716", "row_index": 268, "timestamp": "2018-12-19T23:15:12Z", "event_type": "ListTranscriptionJobs", "event_source": "transcribe.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "110ccb57-127b-4eb9-b820-12cf56b226716", "eventTime": "2018-12-19T23:15:12Z", "eventName": "ListTranscriptionJobs", "eventSource": "transcribe.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: transcribe:ListTranscriptionJobs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e238744a5-01fa-4284-a612-4a4e6f3ec5df", "record_id": "flaws_cloudtrail:0000269:e238744a5-01fa-4284-a612-4a4e6f3ec5df", "row_index": 269, "timestamp": "2018-12-19T23:15:17Z", "event_type": "DescribeWorkspaceBundles", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e238744a5-01fa-4284-a612-4a4e6f3ec5df", "eventTime": "2018-12-19T23:15:17Z", "eventName": "DescribeWorkspaceBundles", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"requestContext": {"awsAccountId": "811596193553"}}, "responseElements": {"bundles": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe84eef7-b16f-4bdc-9d57-002bb51b7714", "record_id": "flaws_cloudtrail:0000270:fe84eef7-b16f-4bdc-9d57-002bb51b7714", "row_index": 270, "timestamp": "2018-12-19T23:15:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "[Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe84eef7-b16f-4bdc-9d57-002bb51b7714", "eventTime": "2018-12-19T23:15:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "[Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c333bc86-7fee-4054-a835-9ff99c23dfa4", "record_id": "flaws_cloudtrail:0000271:c333bc86-7fee-4054-a835-9ff99c23dfa4", "row_index": 271, "timestamp": "2018-12-19T23:15:18Z", "event_type": "DescribeWorkspaces", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c333bc86-7fee-4054-a835-9ff99c23dfa4", "eventTime": "2018-12-19T23:15:18Z", "eventName": "DescribeWorkspaces", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"requestContext": {"awsAccountId": "811596193553"}}, "responseElements": {"workspaces": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "096f24dd-404d-4121-8a9d-06c2c87020d0", "record_id": "flaws_cloudtrail:0000272:096f24dd-404d-4121-8a9d-06c2c87020d0", "row_index": 272, "timestamp": "2018-12-19T23:15:18Z", "event_type": "DescribeWorkspaceDirectories", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "096f24dd-404d-4121-8a9d-06c2c87020d0", "eventTime": "2018-12-19T23:15:18Z", "eventName": "DescribeWorkspaceDirectories", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"requestContext": {"awsAccountId": "811596193553"}}, "responseElements": {"directories": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f488b95-31b1-40dd-be6a-42b9644ded5c", "record_id": "flaws_cloudtrail:0000273:7f488b95-31b1-40dd-be6a-42b9644ded5c", "row_index": 273, "timestamp": "2018-12-19T23:15:18Z", "event_type": "DescribeWorkspacesConnectionStatus", "event_source": "workspaces.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f488b95-31b1-40dd-be6a-42b9644ded5c", "eventTime": "2018-12-19T23:15:18Z", "eventName": "DescribeWorkspacesConnectionStatus", "eventSource": "workspaces.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "Boto3/1.7.4 Python/3.7.1 Darwin/18.2.0 Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"requestContext": {"awsAccountId": "811596193553"}}, "responseElements": {"workspacesConnectionStatus": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b803f005-0ad6-4c5c-857f-f580331d0753", "record_id": "flaws_cloudtrail:0000274:b803f005-0ad6-4c5c-857f-f580331d0753", "row_index": 274, "timestamp": "2018-12-19T23:16:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b803f005-0ad6-4c5c-857f-f580331d0753", "eventTime": "2018-12-19T23:16:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "606f3305-f312-49bd-ba79-dcc3688c71b7", "record_id": "flaws_cloudtrail:0000275:606f3305-f312-49bd-ba79-dcc3688c71b7", "row_index": 275, "timestamp": "2018-12-19T23:17:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "606f3305-f312-49bd-ba79-dcc3688c71b7", "eventTime": "2018-12-19T23:17:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea57f37-0dcf-4673-9ca7-0f7e66753c6", "record_id": "flaws_cloudtrail:0000276:fea57f37-0dcf-4673-9ca7-0f7e66753c6", "row_index": 276, "timestamp": "2018-12-19T23:17:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea57f37-0dcf-4673-9ca7-0f7e66753c6", "eventTime": "2018-12-19T23:17:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrVFNHNGpTaXVPbERBSDNRdjBpOU4rZG0rRlRRZXdwbHNQQmZSRnlZZDF3R05rNDBSQ0g3Rnl3Lzd1Q1ZZSm4wMXpNYUpVR1lNQndqazd6NUFHTFhqSzNtb080QTRqTWpsK01zNTJEaTZ0YlgwSjhKazY1aHlncTh3UHpubm1KanpwZVdUU0lVcmJpQnhBS21CNTJURzhvV05nY1dLNDNZRjJLbDBwTGlRclRPK0xBM1lZc0ZqWUZhaVlrWTBvOEZ2Z2gxUmFkSXdIUHRWZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56bae2a2-2f3a-456e-bfdf-b15844be8c9e", "record_id": "flaws_cloudtrail:0000277:56bae2a2-2f3a-456e-bfdf-b15844be8c9e", "row_index": 277, "timestamp": "2018-12-19T23:17:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56bae2a2-2f3a-456e-bfdf-b15844be8c9e", "eventTime": "2018-12-19T23:17:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxeWdzekVPRVZHdGdBRkJONDlZWFplekcwQnNGbExZZGJlK0VRNU9ZUFVHemdQdW1KaHJZZGx4Q0NtU1VwZ1pGYlVCSG5YdXIxVnlwaHR3QldwV1I4RlZDdUJubVlwY3lhNStqcVVTWnF4MXUyS3lLYVhHdW8zSGtkbnRKMnpEeWVhS21Rdk1pZWt0QVQ1TEFHWHlJTk9TbDFXeWpFczlJS0kyNjVIUWo3M0xMbHRVbFhnS2dtL3UrcGcvRU02KytMQUtjNVhVYitTQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d743600-ece4-40c2-b5d8-4a4d1c8d7c25", "record_id": "flaws_cloudtrail:0000278:d743600-ece4-40c2-b5d8-4a4d1c8d7c25", "row_index": 278, "timestamp": "2018-12-19T23:17:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d743600-ece4-40c2-b5d8-4a4d1c8d7c25", "eventTime": "2018-12-19T23:17:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlcmg3MTFzdnZjeVZzL3lqT3RyakNwdlZXN2VHSVAvWGNFbjBJRS8vMDdhZUJTRkVxK2RGNkFNWm1nTHZENm5qQVpMSDFZVzFEYlBHZGdhWTIxTEdYdnc3cFpONE1TRkZFd0hrWWo4WTFMaU5wM2hlakRrSVBrTURsbDJaZHdsNGNtYzFKOFY1eDBid3BwcDkrTDNCbmdVODlxczl2WklkaUZJRzIxNWFDREZFdlJ4VWFBYjVpYmZMVFNlcUhqYUwyYVNFdnVadUxRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "272a4cf2-4a22-4a8f-ac3f-d21b97703328", "record_id": "flaws_cloudtrail:0000279:272a4cf2-4a22-4a8f-ac3f-d21b97703328", "row_index": 279, "timestamp": "2018-12-19T23:17:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "272a4cf2-4a22-4a8f-ac3f-d21b97703328", "eventTime": "2018-12-19T23:17:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTc2s4dmkxWTVpcUxCTTF4azlKRDl2alJ6RjBRTlY5VjlNRERXTVJ1WTF5cW5DaUF6dzdtSFM3TkFrTFB3N1g5d2ZOcGpCZ09waXg5SDN3Nzd1ZVhmbmZVblY3WFRaYzlHZktWQ3dzeWg0eGM4eThUS2RITXE4TTYvU3d2Q3pGdG5SSmpCM2RHUHE0N0Q3b2JQeHRyUTlEcm9TTnVJcVJhZFVMQXFaZWNjUHBRdGxkOWx3T0xYOEZGbFRDQnNaZHo1ZVU1SE5KV09Iaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3ac0a8a-5292-40db-ba3c-cf32841436c7", "record_id": "flaws_cloudtrail:0000280:c3ac0a8a-5292-40db-ba3c-cf32841436c7", "row_index": 280, "timestamp": "2018-12-19T23:17:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3ac0a8a-5292-40db-ba3c-cf32841436c7", "eventTime": "2018-12-19T23:17:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEMlNpZFYvQmV6RlYyeE81YTQ5Z0JlQ1V6UmpibjBITTBGdjVlcnF1V2VIUjFVaE5aNDZOd29mUHFWUHBzN1RYSnhYa1FSaGtSTXVzeHFmcTRFSytqTU5NY0RtdFQ1MWR2YUl3d1h1c0Fiam9xR09SRzlYeVlwTWFtN1dHQ2pJUjhQWmtkVjNKS21JVzVFZTZIanJVdCttSFVGWDJFRmc1aWtTUDJSZHpITitySDllUk1BaDVFWkZRQ3ZZc282dGUxNWlncGEyTXZMeXFDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b9d7bb3-dd7e-4cc1-8e14-dd65d510457", "record_id": "flaws_cloudtrail:0000281:0b9d7bb3-dd7e-4cc1-8e14-dd65d510457", "row_index": 281, "timestamp": "2018-12-19T23:17:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b9d7bb3-dd7e-4cc1-8e14-dd65d510457", "eventTime": "2018-12-19T23:17:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3T1R5WlpUTmcwbk5KWlE1ZWJsbHQ2ZWtWdEN0c3VWdXI1ampBTWdSak1hY3BwYUtnQnNMVjZxTjFXcXNTVnU4dGxORS93VDd0TGRORVRMS0xiaGIyVG5VVVVwL1M0N0o1ajNXcWlxNzIyTHZyMFNhdTQxQklEMFFJS0tQQkJYK2VMZlNrTVZMUVcwUE1ocEZGa09zL3NJL3MrWmZpR1BuMWRqZWNPTlpMbHUzUW9DVGFqbEhaRW52MmZ3WERwQ2FjVThXMTZIY0toWjdHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e4ccca3-7de4-420b-9a5b-2f1fbfb3731e", "record_id": "flaws_cloudtrail:0000282:1e4ccca3-7de4-420b-9a5b-2f1fbfb3731e", "row_index": 282, "timestamp": "2018-12-19T23:17:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e4ccca3-7de4-420b-9a5b-2f1fbfb3731e", "eventTime": "2018-12-19T23:17:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLQ0lFZXRBczV6NFFmektIakQydEl5MTVJQUsrYStWQUMveGwwVkFZOXZHaEFPeVpwZmxkVDJ3U1ZTVVJJVGFSNmhJRU50dUZTZ2ZGVzJ6R2NMOW5XZkZ2SW9vb1JoMWpWaXFwd0dGZGJpWUpBdkpxUlo0Q2VRVlRuNkFRRjBicGhZc0NwTmMwU0k0SGIvcHhjNWozSTBZdlF6Qko0SXY3UmxRKzNURDdZdWpOWnRMalJkRHdDb2lXVmY2ZEFHeU03a01XaGRxREJ5UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3aea57-b7ca-4b23-a31b-682b5e25b7b7", "record_id": "flaws_cloudtrail:0000283:cb3aea57-b7ca-4b23-a31b-682b5e25b7b7", "row_index": 283, "timestamp": "2018-12-19T23:17:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3aea57-b7ca-4b23-a31b-682b5e25b7b7", "eventTime": "2018-12-19T23:17:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1NmhMaUFRY3VkMXVraklYN1JnbGdNYVd6ZHZ4bTFMcExGTkV1WGNPV2xDY2oyL1ozaTkvbS9CSDJUelZTR0xJU2gzT3c4Q3EraXIzdFpDeUNtTWRpZU1Fc0tINDZWaWNwaDI1MjVPbCtURjF4elJPbGp6YzBCdUxUZ2p5K0dBaURwN2xuVlAvOFlZY00rRlhQMVRNV3lib2RPalorUXBRSkZFeDNBZzR0alljSTczR3NCQmJEaGNBY3A4OExPU1EyNkQxdGV6QkdsRHNOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864f6304-81da-494c-b012-58a221e1c249", "record_id": "flaws_cloudtrail:0000284:864f6304-81da-494c-b012-58a221e1c249", "row_index": 284, "timestamp": "2018-12-19T23:17:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864f6304-81da-494c-b012-58a221e1c249", "eventTime": "2018-12-19T23:17:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkSyswOCtFVWo2M0RSNnFlcGpmQzdhYjdPMDNGQWt1UkZ6bG1Ua2dwblY4NExoNWxiUVlSVysxNXJUZG5BNUt4MTBEa3BwSTBwamIzSVJDSmFwRmhCdEx0SEg4eDAwcjR0OURCTmVTaElabUJ1SFZnVDJRM24yYll6T1R5eTNjVktxZlAxTkV0WS9Pc2t2VGNQaFp1VkFreHJBUUdxc3liN3l2QlNnc3F2cGI1RVFzOFhMeGR5aXpBeFFlWFowQ2V2dWdKeVhVVHdSMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c994b39f-5a82-4d49-87da-40423205f889", "record_id": "flaws_cloudtrail:0000285:c994b39f-5a82-4d49-87da-40423205f889", "row_index": 285, "timestamp": "2018-12-19T23:17:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c994b39f-5a82-4d49-87da-40423205f889", "eventTime": "2018-12-19T23:17:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnMzErd2k5cVVBbnpNUUZWTEJsRXM1MnZORkNrbVJRSEM2QXJGN240Yk9wN3Z1TDVURWc0aGNlNXNRaE5abjdYdnRiZGdaeHN3Qkt3cFk2ZDBCb01walpXemFnWG5tWGtUMEM3aFVhVGg3anFEYXJhdlY4UGM3NXpwSWN6dHBaNWVhUmxqdWV2dVpjL3lVUnYxczg4c0NsdzVaV3IzSm5hbjQ2NkxwTjZUR3RPNVdJSWEvWDZoaExySmV3aFZzMHQya0U2d1RmSVBOcVBXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "191a12f7-99bb-41ce-895d-8db2e3eb3952", "record_id": "flaws_cloudtrail:0000286:191a12f7-99bb-41ce-895d-8db2e3eb3952", "row_index": 286, "timestamp": "2018-12-19T23:17:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "191a12f7-99bb-41ce-895d-8db2e3eb3952", "eventTime": "2018-12-19T23:17:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtaEFobXJ5SVZETGRtTCtIR2t3dVBySGpFbEdjdk82M2RueFlNVjFnZGN5cHhRaWhLd3kxRGRSNDM4NnBBVE1XVnV4ak5XOW9HTGJBdDhnS3dsbVpieE11Smp3ZHIzSDV6VWREV3hJYWl1Q1pXdDlJZGd0eHQ2YUlqcjlqeW5uWGlRWmFYV3R1RWYvYUgvaUhNU2hWUGRjbGFjR0hhSW1EYXRxODh3QnVIbjFKYlkvMmNMdWhzbG5SMDBnYjlrajdXL2doeUhWeFZJdjZXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291cab44-69bb-47eb-8656-336f38839b", "record_id": "flaws_cloudtrail:0000287:291cab44-69bb-47eb-8656-336f38839b", "row_index": 287, "timestamp": "2018-12-19T23:17:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291cab44-69bb-47eb-8656-336f38839b", "eventTime": "2018-12-19T23:17:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWSzNjNWFBdzB5dnJrU041ZklXOXBSeWNWb003d2xlV3ZzeTNqQnhQeGhnd0lBY1p2TFZ6WG1UakRqbU1hMDBYR0VBSHhRbEZQV0RJKy9VNnBzRkFKRGJvQUc5aEh5dDRJWk5iSWROeGRTbjd6VjhWampvSE9ib3JnRkxYeW05dllyVHkvNUJuTHY2dmlJbUkxbFpPTy9GcjNRNERPMnFXdm1HRnlIcVRWTEVRTTZENGpLclhveWh6aTJSQTJDUU5jU1BXZi8wVmJDNWx6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c131607-5cb5-40ec-a2fa-63998425b118", "record_id": "flaws_cloudtrail:0000288:21c131607-5cb5-40ec-a2fa-63998425b118", "row_index": 288, "timestamp": "2018-12-19T23:17:55Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAR639AIE5HFZDZOPM", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c131607-5cb5-40ec-a2fa-63998425b118", "eventTime": "2018-12-19T23:17:55Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAR639AIE5HFZDZOPM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T22:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8163e3be-c7cf-4bba-8614-cdaae76e4859", "record_id": "flaws_cloudtrail:0000289:8163e3be-c7cf-4bba-8614-cdaae76e4859", "row_index": 289, "timestamp": "2018-12-19T23:18:05Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAR639AIE5HFZDZOPM", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8163e3be-c7cf-4bba-8614-cdaae76e4859", "eventTime": "2018-12-19T23:18:05Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user Level6", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAR639AIE5HFZDZOPM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-19T22:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dd255ff-e96b-4dec-8e83-2413f6c21eb7", "record_id": "flaws_cloudtrail:0000290:6dd255ff-e96b-4dec-8e83-2413f6c21eb7", "row_index": 290, "timestamp": "2018-12-19T23:19:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dd255ff-e96b-4dec-8e83-2413f6c21eb7", "eventTime": "2018-12-19T23:19:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99bc2e8b-622a-4f15-93e2-76914f2a115", "record_id": "flaws_cloudtrail:0000291:99bc2e8b-622a-4f15-93e2-76914f2a115", "row_index": 291, "timestamp": "2018-12-19T23:19:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99bc2e8b-622a-4f15-93e2-76914f2a115", "eventTime": "2018-12-19T23:19:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpS3BsaldnQ29BWFJ5emgvTlNNbmo0QUovY2VDcnhyRDg1VEdRRlU0M1JyV2lvVEdkMVd1YitScHJxVzlWUHZRUGtYZzBaMEo2cmI3MzdOdmU0WCtIVmc3dXBlWnF4dVdyc0thRlo4Q1BhRkdWdkZPdVY0VER5U2lpS3V2SUtVS1lZUDdEUVNDbXhlVkJDNzV5UHBsSk9pZWMrR0dzc3UveHI4ejlyNm9QWXFhS1hsOE5iUytUeXE3ZlQ3UzZVeVJwY0NVaFowdnhhclBPdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f23add0-623a-4623-b91d-a8ded85d50d0", "record_id": "flaws_cloudtrail:0000292:4f23add0-623a-4623-b91d-a8ded85d50d0", "row_index": 292, "timestamp": "2018-12-19T23:19:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f23add0-623a-4623-b91d-a8ded85d50d0", "eventTime": "2018-12-19T23:19:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1RXFTVUJXTEF5a1ZzQ2ZESk5tc0lZU1M0blNYQ1Bhbk50enFzVUpwRmlqcFRpMkIrNkR4ZFUwSUJLdnA3RW9MUktKOTU5bFNIb0NOeDVQeU9xRVhKcDhJOGlZRjRjbFp5ay85NXQ3ZE5tRFVoa1p1cUhJTStmeDY4Sk43Z05nZXM0WUdFQjJzQ1RsWFZJSElFV3c3T0MxUWpJdXdZSWFIYUVRc213cjNSdE1DQkZsaUd2Ymh5SlZaazVrbTh5bVBxUzRrbFBlZW9RUXBmZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1642d995-1b67-413c-9af2-0ef03032d", "record_id": "flaws_cloudtrail:0000293:1642d995-1b67-413c-9af2-0ef03032d", "row_index": 293, "timestamp": "2018-12-19T23:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1642d995-1b67-413c-9af2-0ef03032d", "eventTime": "2018-12-19T23:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIQTdmZDJsbXpkeFpHaUxYN01RY2hIK29pT0pWMGtpcUd1Uy9NbkhRRzZqY1ZVMWFGK0dtaXo5QmJOcEJiNUNqYWE1NlptTDkrc0ZQdEFFOGJvZDJNQmtlUG9pUERsYXB3dDVWZVdJemxyT0pYb3pCcENJZzIrb0pBaXU0UVRxaytNb3JEOGtWSVVCV2RoQXlGSmhIRDlGUG9VQjJNelN0NkliZ1BVanhFQXRFanEzbTNwTG9nZStXRTljSGhpdVV1dndVT2NXT1RaRWFjZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5294a6f1-9ad7-461f-80d5-48faa78e9084", "record_id": "flaws_cloudtrail:0000294:5294a6f1-9ad7-461f-80d5-48faa78e9084", "row_index": 294, "timestamp": "2018-12-19T23:19:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5294a6f1-9ad7-461f-80d5-48faa78e9084", "eventTime": "2018-12-19T23:19:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbi84SmpZMTJzckJwclByU2xKWUg3Zm9uYzB4amhoV2VmamdzcVZYUldKWG1Xa2tjSXZXbGNZQnJNcGRRUTZVYVlvOHZlMmRPWXh4ZnJaZEVvMFZlTjVwYjBzekc4NXBYSzlDQXZCY29FVWRKTy9idDRTSEpSUlZ4OCtjWUV4eHJpTjUxNUNCV01aalYzY0JwMTNjbFFWaS96QlRaY3l6VWs1OERNUWZIMEs3YWovT0V1RVpsZkhBY1NMTVZNNHY2cENJbTlsYko3Mm8xdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b781a1f5-dc10-4319-a745-49bfec19f0c5", "record_id": "flaws_cloudtrail:0000295:b781a1f5-dc10-4319-a745-49bfec19f0c5", "row_index": 295, "timestamp": "2018-12-19T23:19:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b781a1f5-dc10-4319-a745-49bfec19f0c5", "eventTime": "2018-12-19T23:19:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFNzliNDZyY0o5UVdDOEd5T1YwWkhqV3BIQ01SaTVRdElyUUp4SDBseGFGcFBiVEFZbm8rTGlVVjArZWlmcTlhV3E4OHRDbVQ1VFdLT3ROWDIwUnlObWlwODFOdkdLWEdORDJQZFhyK3dyTkZhRlpmOTBOK2l3QWhSTm83NHAxS2F4eGF3M1lRTENjZ09IRnI2aGRsNmZPbTB3YWFNTFhYalFRNEEzL0ZVT1ZzOW1YTE90T0Vzd1VmYjB0cVUvdk5BVnlSSVRsRk42eDlpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74c65889-f966-4e45-94a9-5519ec15d937", "record_id": "flaws_cloudtrail:0000296:74c65889-f966-4e45-94a9-5519ec15d937", "row_index": 296, "timestamp": "2018-12-19T23:19:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74c65889-f966-4e45-94a9-5519ec15d937", "eventTime": "2018-12-19T23:19:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3UWoyWjVOTTgxL1RzN2JvcGQ1UWE4YlVQVkJHRE9UZTRwU245TVE3V0laYlk1ZEErVzE0ZzhOaHArazUrZnRVRzd5d2FpZjl6UTlUeU5HaWRqa01oUXNGRVZwdTFCbWJtcnNWdklXSEdDeWZ2MTlUdHRhSEsvdHJSOFIzRXZkRVFieW1RazVRRkd2dVM5TC9HN3lPRXJkeThHak82bHUzZklRajc0TFIxRjlUaXdsZy9OWWhWT3FuNW9jTVk4dUVEMUl2Z3ZHT3RUbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdb1e9f3-0760-4cb8-a11a-adf6de938775", "record_id": "flaws_cloudtrail:0000297:fdb1e9f3-0760-4cb8-a11a-adf6de938775", "row_index": 297, "timestamp": "2018-12-19T23:19:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdb1e9f3-0760-4cb8-a11a-adf6de938775", "eventTime": "2018-12-19T23:19:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaHl1WXh0bW9rc24ycEhwKzJsamJpK20zRTVqbDJGYVlJWlhHdW1nZnRlQ1ZhZzErb2JyRUlWU1VXNmpOZWNsWUNQeGNBK21yOTRhTjhtUTZNb3dxdi95c2cyM2NuUy9XeU1hR0puY0R2OW00MUc2cVBXNWVOZ2trMkl5MkFTYVhnVGxPNEFCL3BhK2oxQTVUQnp6UmxtQnRWYk1BZXR2dVhSMDRkOEJPSnVaSlZ4QTdFWnM3cVdpUHZsRys1MFdwbU9hWW4xd3QwWkVVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af3bba48-6378-4a7f-9e59-efc513a0d2c8", "record_id": "flaws_cloudtrail:0000298:af3bba48-6378-4a7f-9e59-efc513a0d2c8", "row_index": 298, "timestamp": "2018-12-19T23:19:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af3bba48-6378-4a7f-9e59-efc513a0d2c8", "eventTime": "2018-12-19T23:19:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpM05rbCs2OVhDY2JxaFlhT3RtZWo3ZkllallJQ1p0RlNIK1p2WUg0dERSUHFLcmptRW5pcDB3bEplRktCVFBuWHlZN1JocGllWlgwanZOQ0x3bTZmZzgweW1yK05VMHdLZXNBcTIyb3BCM2g4QmtsUkFEZSttdXpCMXF5RHk1aThFaWFja25LRTg1TVBPV3BiK1p2SzdGS0hReWFTdjBWd004TXB0c0NVZXAzaEliaUFlMFJtc3NVZWZwczFteHJPQUlSei91YjB6Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e378afad-761d-43fa-80dd-07544bdab3f0", "record_id": "flaws_cloudtrail:0000299:e378afad-761d-43fa-80dd-07544bdab3f0", "row_index": 299, "timestamp": "2018-12-19T23:19:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e378afad-761d-43fa-80dd-07544bdab3f0", "eventTime": "2018-12-19T23:19:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5ZnRWSXRRalc5UXVNTW9IMWtWL3dtb05KQTBzMUx4UDhrZENwbGdIcjVlUEU0U0FSTmFNQXN6RjdGd2lDWXYvak5JNzV1bUVkNGJoK3BMOWxzZVNnbnlsQmRTdzh1MFE1R012ZWJxVnV2dUxGcTNmblhkOWJaWWhSd1laalN1L05VNFZibXBEUGdmeDdMSXhGM3d0eUYwbjkxTERFeDZ0Z29FNzJWbHJEQ2dVWG03VUtqbHRLNFVaUjVrbFM2ZFlEeStZdWtGY2k3Z25qZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1c5d2a-7600-43c5-8e3a-da0e3be16449", "record_id": "flaws_cloudtrail:0000300:9f1c5d2a-7600-43c5-8e3a-da0e3be16449", "row_index": 300, "timestamp": "2018-12-19T23:19:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1c5d2a-7600-43c5-8e3a-da0e3be16449", "eventTime": "2018-12-19T23:19:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNQUN6SWVvanFhZkx2bCtadGpJVFFNeGNEQUxtdGRQTXArRDFUeTFXMDg5Uk5qK3Ezb1RHdndQTko2d3FIVS9zeWhRQkFVZEg0c3ltVkg3azBqS3JQVlQ4S3IwdFhpMGYvT2R0Z3RRRWt5RC80ZHl4dnM2TmlEY2cvcEZ3N0N6SFpSL1VPV2dhaHJ5WUo4TGRsRGlXalpGY3NBUXlYcGIvZkllWWRmWGZjNlZoRDNnaXFTTGxmS2dYQjltUEJRRTZUTXhuanFYSUJCZEQ2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11906f07-eb1a-4e0f-bb18-ac29e4f96dbb", "record_id": "flaws_cloudtrail:0000301:11906f07-eb1a-4e0f-bb18-ac29e4f96dbb", "row_index": 301, "timestamp": "2018-12-19T23:19:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11906f07-eb1a-4e0f-bb18-ac29e4f96dbb", "eventTime": "2018-12-19T23:19:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEaGx1SjlQMC83T25qVkZpQ1E3bTNQVEdZQVpSTEFod1I4RDNPSDhiUTdRV1FPRkltaUl5bUJMRzVNY2pVa2J5MU5LWHQyR3BJTWlhOUMrWHdyVG9Ea3lYcWR3Y095YWloSVhaYzV2NnJpWmdreEJoK3dXVVZweHNQcEJaQk5YdTR0V0o5QmlSSjYyQzJXanZxMnRxdEVyOXdQckVtSEFyNFhzaWRnajljTndmSG5TWHliQXJyUUlleHJoNGlLa2JTdHVVOGdNSS9OS2xQZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c33a15b-79b8-494a-a9ee-ed7278d57f56", "record_id": "flaws_cloudtrail:0000302:9c33a15b-79b8-494a-a9ee-ed7278d57f56", "row_index": 302, "timestamp": "2018-12-19T23:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c33a15b-79b8-494a-a9ee-ed7278d57f56", "eventTime": "2018-12-19T23:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnTDYybDZFTUorZUxlVzNFMFFnbk9sTTdkdisvRnFZd2NhQ0VJUEdBaWowdTdDdGRBU2ZYczV0ejFOSmdxMzZXM1JuOGF4c3haSkpOU0FHeGI1OXdTT2tVRTFJTEdESXZOYkRVR2o0cFpNcVR6Z2MzWTVKemNIRVZ4Sld0RXFQNXVqdlJ0SWVJdGVZN3hzNGp0eC81RTFmVFBGYzFoK1RUZkFHK3p3Mng1OXFCUWNQRThVUitqUnRuZ1hhUEpGSGZwUEhuaEdGSDFjSXM3QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bd2af89-c072-4702-9b75-14e9ee1b91d2", "record_id": "flaws_cloudtrail:0000303:3bd2af89-c072-4702-9b75-14e9ee1b91d2", "row_index": 303, "timestamp": "2018-12-19T23:19:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bd2af89-c072-4702-9b75-14e9ee1b91d2", "eventTime": "2018-12-19T23:19:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzRWwydU5GbXZJK2UwTE82cnNuV3dUQ0U5VURVQzBDT1hPQVFRMVppUENpbVR0RWxSTkVOYTE5Zys3UldOTGxQeUhnMUc1RE1ER2g4b1hEenppZDJvRFIxNDczUFRSbFhuM2dLNVlSWkFmbDEzR3Q0OFplUDV2OUorSkM0L1RyWUtJQzBHSTZLMS9JWHdteE96SUo1V29LSEJEUit5bG5DRzhOUHNHc0pXaUlPT1dnQlo3OTMxTFExYWNZaVRqT0pNK0c5QWNJTlFQMG5XZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236ab9c3-265d-4a41-8d31-20cb480ff9ab", "record_id": "flaws_cloudtrail:0000304:236ab9c3-265d-4a41-8d31-20cb480ff9ab", "row_index": 304, "timestamp": "2018-12-19T23:19:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236ab9c3-265d-4a41-8d31-20cb480ff9ab", "eventTime": "2018-12-19T23:19:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBR3drS2w2MFJqL3d1ZGhCQzVFY1diTXQxOTA1Rm1ORk1nTE9mamNvSHhHQkY4YUViOEFDUmQwMm1PMkVXYU9XdTlmK1R5VUFzWEpzcndGTGEwUFduZzNuRmNkWXRUdHFNaWRTRXJHOFdNblhmeVpabld0ejBzUWx6dVcvUzFQUEtUUXNXNHI5VVRzNVpyczkweHdvLzIzVzBvSUJFUlBvR3FoTG1nanQ5ZHBRTzFtK1FSRUJIckI3eEpFdlBpcTUvZ1Qxd2Nka0kvQVVMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b29a66a-dee4-44e0-bbbf-ec122082d5f6", "record_id": "flaws_cloudtrail:0000305:0b29a66a-dee4-44e0-bbbf-ec122082d5f6", "row_index": 305, "timestamp": "2018-12-19T23:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b29a66a-dee4-44e0-bbbf-ec122082d5f6", "eventTime": "2018-12-19T23:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0SllNSG5SUkNwVjVNeGNDbnZwYldldlh2MTN2MDhMYkpjdjJOaXdVa0VXVXU2Q2lTWGhGSGRzQWRjWk5TNlJyekk5ajUvYzdIMXFoQWpwYjJ0RDFZcTZWZ3hKTmpSb1ZGVEQvdkxaOHVLZGVCZzlyay9LaHJGWUdpVW9VdXRLZWE4eEhqZCtYUWM0Zncyc1k3MndtbHAwcEtPbytzQ29TcjV5dExCWEpVR0xvMG5udEV4MitrbHhkNTZ4OWJwT1l2WG5rNFA1R1A4R1ZScXhXT2RyY3h6S2hjclBZaG1NPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e0837f-3e82-4857-b6e2-9a42ae07761b", "record_id": "flaws_cloudtrail:0000306:14e0837f-3e82-4857-b6e2-9a42ae07761b", "row_index": 306, "timestamp": "2018-12-19T23:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e0837f-3e82-4857-b6e2-9a42ae07761b", "eventTime": "2018-12-19T23:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtK0dPQVcxUXVRVVdTYWQyWnlBcERkVVN3K3RSaE90ZzdvRWl0SlFYajlpR3plWEtGb2NHMERzdzFzMUFCZjFvenZQL3FWRk95THB5QmdwMHFRN0hXVkQyTGxOejE5bWkxVGNWaXpjQU9GTjA1UVgrakRXaFFGTlBqeWxwYzFaK3RDOHhLUnl1ZXJDbjlGRlRMVHhYOXlBMTBDZEZyUk9RWTFFMlFPajg0SS8xeDR0QnZwVWdHcWxwWDNOQ05IS3ZvMzNWMkNydHZvYU11S0hyMmE4Umh2bkViOERxTlNBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68c51775-e5ae-4313-af41-4c7c1d5f4ce2", "record_id": "flaws_cloudtrail:0000307:68c51775-e5ae-4313-af41-4c7c1d5f4ce2", "row_index": 307, "timestamp": "2018-12-19T23:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68c51775-e5ae-4313-af41-4c7c1d5f4ce2", "eventTime": "2018-12-19T23:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0Uis0TEJkeTFiZUFLMll3QmlOSVJ6VGEvSHVhTE1jR1JIQzRDSHFJMHNqU3VQcjBCVTcxMUFSSTlsM0txNUc5STJ6NGhiNTRtOWlHZzN2M3BtMHhiRklyVkFxbVlxMUpEakxDbUFGcVhzZDc5VHF1ODZxWm5Kc3pPVm1wcUlNa1ZYZDR4aVlvTXBqNUZ4Y1VNeTlwbHp4eVNneHB6OXhJT2x6Z1orT0tlOVFPZVgySW9teTBqdHJjQmxKc25sV3lvTDhPblhLR1kvaGEzMXZSL1BBNlQyTHpSS2Q0SklzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0f3a858-4f1d-472a-9e63-36fb1c6a32f6", "record_id": "flaws_cloudtrail:0000308:d0f3a858-4f1d-472a-9e63-36fb1c6a32f6", "row_index": 308, "timestamp": "2018-12-19T23:19:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0f3a858-4f1d-472a-9e63-36fb1c6a32f6", "eventTime": "2018-12-19T23:19:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiUk14V0h1Y0pxVlNMTzhOM0V4V2VaeEo3ZVRPR21UUHpUYnMrNDJzTXFrWGloeDB5WVJ6MlB0S2ppT05VYWROUUpyQTJoVk0zbWY1UVRDeS9ZZUlSUVZTZmpXb1ozeXZxK1A2S29YKzlrZWh3bmpZNSs1blMzQzlzMnNYUDJlSm92VmJoTXY4NVlQK21STzArT2dVTEx0d3BhWlQrOHlsS2UwNkRpdjBsUkhlQ3p5NVM2dkNlL1k3d1BIeHloUDhxZ0Fqc2FGQVRHMHd3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e9c5c5-5c5a-4b24-bb1f-e83763ad2b8a", "record_id": "flaws_cloudtrail:0000309:07e9c5c5-5c5a-4b24-bb1f-e83763ad2b8a", "row_index": 309, "timestamp": "2018-12-19T23:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e9c5c5-5c5a-4b24-bb1f-e83763ad2b8a", "eventTime": "2018-12-19T23:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIweXp4ZkJNQlduaFBOVXMrMDhGQTcwN3hPUE1semI3WG9jRHRPdG9KaDFzcmdqbjlNNmJOamhKZkEzME9KcDN2YWtoOTJ0RXFKemRGNHhpTktVRjNVYUs0S2R1ZWFOVFlkVThnYS85Nmx5NEkzN1A2RW91OG4xSkFPZlQzbTZ6K0ZJbGZ5T2hzWGcwMU5rWTI2NC8wbU5TN0x5bm9lamJLUExFdVRvM1BMNS9vT052ZmZ3T1VoamFnUkNKUWswb2ozNThKQUdIVGhYemNrc0dnWFVRRUY0WXgyZ0JjbEM4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96efb45c-f7a7-4d21-a7f8-c45226bb7344", "record_id": "flaws_cloudtrail:0000310:96efb45c-f7a7-4d21-a7f8-c45226bb7344", "row_index": 310, "timestamp": "2018-12-19T23:19:59Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96efb45c-f7a7-4d21-a7f8-c45226bb7344", "eventTime": "2018-12-19T23:19:59Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73d2453e-089c-41b3-acc1-2c1a0cd221a4", "record_id": "flaws_cloudtrail:0000311:73d2453e-089c-41b3-acc1-2c1a0cd221a4", "row_index": 311, "timestamp": "2018-12-19T23:20:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73d2453e-089c-41b3-acc1-2c1a0cd221a4", "eventTime": "2018-12-19T23:20:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da5047ef-155f-422a-a32b-cf3679fe54de", "record_id": "flaws_cloudtrail:0000312:da5047ef-155f-422a-a32b-cf3679fe54de", "row_index": 312, "timestamp": "2018-12-19T23:20:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da5047ef-155f-422a-a32b-cf3679fe54de", "eventTime": "2018-12-19T23:20:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZbXlBbUN0TmREdWxXQ1BXZEg3dFNIancwb1ZIOE9TT2MweWE3SWpIVjhVYlo1L3dzc1M5Q2xlczdQdlB6VkNjM3lhVlR4QmZGbzd6QURabmlMclhjM2xvR1p4M2U1ZDhlbTRkc0M3b1l4WS9laTZTQzluZ1BCbE95MENQV0lsR3NMZmZzUFlKSUQwc0tvdDQzeXg3OUVrRUZTNU1zeTRwSnU2N3ppaWlRUDJPaHZlVytzRXlFVW5kL0NpRVdCYngxaWpwNVFMZWJNUkVyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1af781ba-832c-4670-a40e-72d675fd6031", "record_id": "flaws_cloudtrail:0000313:1af781ba-832c-4670-a40e-72d675fd6031", "row_index": 313, "timestamp": "2018-12-19T23:20:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1af781ba-832c-4670-a40e-72d675fd6031", "eventTime": "2018-12-19T23:20:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUYVU5SmVrTjl3ZGk5bXc4S0YwRmMyR2JFM1NsL2Ftd2dhbzNTSXY0NjkwVWp2WHhPMXBrRU9xb2ROK0M2NDArL0JvYUpvZzlCU0xCYVF3ekNBSTY2c0RnVHBjSG11dVRtaFZOVjhMVm9nbUJxYTY3VStDMFRNOE0xcG5jck50eTNDSW14azlRQlRjVzZVS0REeGNmQ3plVlJsV0lDYUh5OGlzQ2UzUzBMVlcxVGErb2Rjdmh5bndYckF1OTAvZS90YnBGQm5abzRMcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6119bab-70ca-4972-8b21-b23733e3724", "record_id": "flaws_cloudtrail:0000314:e6119bab-70ca-4972-8b21-b23733e3724", "row_index": 314, "timestamp": "2018-12-19T23:20:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6119bab-70ca-4972-8b21-b23733e3724", "eventTime": "2018-12-19T23:20:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzenN6emtUVUdYcTliRXRkb29ITlhsU092OEpBYTUwVDhBWVA4MDVIVWlBdlhpMkZJdFp0OUlPcFd0bkY3NzkycHc4N0E3OHdjZ3UzUzg5YTk2Yzc4aEk1U2pZdnU5SW1aTmxReHRQNVcrSGZFbGYwdTZ0OTdlV0NEcldEKzhyVmhibzVWSEp1Z3hNNGpFUnQwQjNEd3NjUVgyUXpUTDVabUVzQUtHczN2YVhDRk93b0pKR3NIYnVNTm02dEhuNXM5QTF5YWJwTm5BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a603432-90bb-4b7e-9120-d5f5c675805e0", "record_id": "flaws_cloudtrail:0000315:3a603432-90bb-4b7e-9120-d5f5c675805e0", "row_index": 315, "timestamp": "2018-12-19T23:20:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a603432-90bb-4b7e-9120-d5f5c675805e0", "eventTime": "2018-12-19T23:20:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZYmx6SnFwMWlkNlovSmYrRjBWV3poVEkrSlZnelJVTXh2T3pMQnBpSjAyTy80c2tVOEJ5Wkk0WUNERVBaVXBMMll5WkRBOFY5OCtlSUw2Nm52V1dVaW5uL3RkNWFiNmovbnRpUEFJdnN0RXhVZzFBNnFPQjNER3k2dFRvNkE0OGJsaVpoQmRKdTdhSEsvWVF6TVpha1BuN3h0U05LVVQrbE5TTTdWbjBmN3ZYNlA5eU1Gd2dvdklJS0FjQVh3dnNPOGdDYXBybyttMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c499b02-d871-42d7-a849-53ebc6f8e2d9", "record_id": "flaws_cloudtrail:0000316:5c499b02-d871-42d7-a849-53ebc6f8e2d9", "row_index": 316, "timestamp": "2018-12-19T23:20:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c499b02-d871-42d7-a849-53ebc6f8e2d9", "eventTime": "2018-12-19T23:20:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVbUtkTzJvSjhPeUF4U2toeXRQb2VGVDYyL29HNlVVVFpaSXJGNnVoQXprNTNDYUNmTUR0YUR2VS9oN3p3cXh1MXd5Y3dEWVA2bXlzamFPbzZmL1IzL2V4YUJOa0w2Mml5UUFYWEdPS3FtejRaVURGdUl1WGQrS2VJY05rRDQyN2N0cmVmdGJPQzZkOEVrSGluV21PN0c4MWhkUFlXdGFvY3FuaFZTM3c2UDNyMUFzUkNwYXdyc2lsaEM5Vml5VVlVaVNwRlYxeWZKQU01QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "430709cfd-5ab0-4cf3-96c9-323ca732f76c", "record_id": "flaws_cloudtrail:0000317:430709cfd-5ab0-4cf3-96c9-323ca732f76c", "row_index": 317, "timestamp": "2018-12-19T23:20:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "430709cfd-5ab0-4cf3-96c9-323ca732f76c", "eventTime": "2018-12-19T23:20:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRlUwUGlhZ3R3UG5qaHk3bWZ2UXF4bjUwckIra2R1ZkhHcXpyaUVWbHIvaGh3RlptUjRMVWg1Y1R4RUVxRHJNM1NIU09CVEtkclVZcUw3SUZoS0NOZmVBL1VFbkFRYkRVOGVZRTNwK1QxOHRQVXNibXdzU3Q3b3lqWkRFK2pPeTRid3FSczAzZm4yTlhncDB3OWRWSXB2OHROZ3NPaW1QdXo0MDk3YlNNb1JMdmFwNEpPSGFFN0cwUTl1LzVNK01tSytEbU1EZEdtUHE2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ef8fe4-3e79-4c56-8e7d-0d13d8a4ffd1", "record_id": "flaws_cloudtrail:0000318:e5ef8fe4-3e79-4c56-8e7d-0d13d8a4ffd1", "row_index": 318, "timestamp": "2018-12-19T23:20:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ef8fe4-3e79-4c56-8e7d-0d13d8a4ffd1", "eventTime": "2018-12-19T23:20:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V2pZeldpNHBaNk1LbEVJMnVTRE85NzZ0Yk96Q3NGNVhtWE1mYWNqMzRRbU96ZnhTSUhMTUdKTHJkcnY4c3U0ZStwNFlJODEzZHU2TFdGK2ZFVW5uc3Y5MUVKU2I1YUNRYUFIK0dKOUFhL0Z2b0tEQ3BYR0kwREhiTDJvNXJ0WUxoTjduMkxOd1RRUUZabFM2clNKVnE2M1BmOGlRYlpGaUI1THJGYlliVmNsdkNDdmZqN2UzRTRSNlFudndDTUhsYmlBV0xLTE9YND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc56ca63-29bc-4942-8d6f-ee25a1f107c9", "record_id": "flaws_cloudtrail:0000319:fc56ca63-29bc-4942-8d6f-ee25a1f107c9", "row_index": 319, "timestamp": "2018-12-19T23:20:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc56ca63-29bc-4942-8d6f-ee25a1f107c9", "eventTime": "2018-12-19T23:20:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6RTU0bkJvVGxVYWtQcTdMeXk0SHYzNDVtNGFFSjBDYUp6U3Z1SGxiUUY0V3VnWVcxRE1paGpna3o2YzNKZkh3Tzd1Y3BGMWhuYlRraUY5SkxNeU80STgrMEpoNUJqb0lvejVpd0hzdzduRlAvNFJKaThWeTk3VW1YT2FpTnVUa0xHd1lEUTJsOWpqM2FkZ1ZTKzg2cCtycHRqSCtQdXZGT0p0K1JUNkxmdlJ6Z2JISk8yMVF2c254RDhuMk5sR3ZjaS9NbjlWV3REZkpqZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c29a4d4f-e87f-46e4-bcac-f765b92700c9", "record_id": "flaws_cloudtrail:0000320:c29a4d4f-e87f-46e4-bcac-f765b92700c9", "row_index": 320, "timestamp": "2018-12-19T23:20:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c29a4d4f-e87f-46e4-bcac-f765b92700c9", "eventTime": "2018-12-19T23:20:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3ajVUdTQ3UDVvMWgvbkNLcW9NdW00NjRKRlZFRDBBcEFINWY1Q1Q3QjRqdkVkdEo2aVJVRzlQa2tWNWJtVnpvL2loRHJNblZZVC96NDdXdmc0RWN1WkdJRVgvWDR4cnAzZGpObWp5VWlwdmp5RnpVOFhnaFBkRzNlcTI5QWJrb1h4SVFPcHdvRVhCdndabmIvcE41eTU4U2RnRC9YdXluSDROMzVmRW52UHdPOW12R1dWSVlFSlVIUk93TkJGcFNKL01nNlUyRFFnQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce36dfc-72cb-495f-b4c0-939010bd779d5", "record_id": "flaws_cloudtrail:0000321:8ce36dfc-72cb-495f-b4c0-939010bd779d5", "row_index": 321, "timestamp": "2018-12-19T23:20:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce36dfc-72cb-495f-b4c0-939010bd779d5", "eventTime": "2018-12-19T23:20:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Zkh0cVlpbDdDNEVQUWZJRVNkcVpyUVd4RUVhaFBjc2tZMDlabXpLVWNrNzVsMXIrY0tpT2ZRZC9tRE5uNmxCZ3RCOGovVXJjUkhMUFcrVUs4TnNiUDVBTXd2ZVVJUGRoWVIxNExxRzlEdHBLR05ZQWJCNUM4eUlXdGtIRlpiempPTzZCb3dHSEFwZTQwaFhCZUYzVVd5YnJlcEpRcmJTN0JGU2pucm9qNjR4UWwxUmg5QUhKU2V5S0hOSEd6K3ZoTFpCMXlzdmdUakxzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a26faa-2190-4b11-9a53-cc3dea57237", "record_id": "flaws_cloudtrail:0000322:63a26faa-2190-4b11-9a53-cc3dea57237", "row_index": 322, "timestamp": "2018-12-19T23:20:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a26faa-2190-4b11-9a53-cc3dea57237", "eventTime": "2018-12-19T23:20:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwbDhFMWxhVElnaDB0a3QwSEVkdXY0S1c4NEJSSGVORFYvMG1rQVNMV3ZSc25jTlBRdkpTb0pPdWtxVEIyOUhNVDVuSzcydTB0UC9HNWp6MVVvT0xkUXhHM3BJdE9oQ3ZuZ3ZNeVdPUzlrbHRYOWVuWFh3alpqYS9iOThHb3lsVk1VM2VTWUN4NzU2SkkrYUUvYXNZaTdHT3cvcHNVK1VzS0JXckxBTG9FVFNoMHYvL3Zja2tyZVNGU1drcXZ6aU1VYWlWb1ljL1Vuc25pQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49cd930-8b99-498f-90fe-b32b24bf65e0", "record_id": "flaws_cloudtrail:0000323:c49cd930-8b99-498f-90fe-b32b24bf65e0", "row_index": 323, "timestamp": "2018-12-19T23:20:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49cd930-8b99-498f-90fe-b32b24bf65e0", "eventTime": "2018-12-19T23:20:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvYzh0Zyt5Tjg5cHE4VnU0Mm9ZNEN4OTJsM2ZIVFNBajlLaEo0MDhtSnVJMmpJL1VhZ0piN3FzaUI5a2k0WHNsMEVnbDNjT3pUeGo5WnA5YnBwZmlPbytBY0drR2N5eU1aT0JOQXRLcXI2bHJIZGhOOXBtQXBGYnY3OUJaM000aW9KU3lkUGIvWmVkbGJsYVdveXdHQXo4VThha2dVV0Z0Q3VrTkpVaklIZWNyTzVsQkVTNHY0elRacmo5dCtzdFc5eEJSd1V1Y0s2aHpDQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2a63f7-e844-433a-8023-50616c46987", "record_id": "flaws_cloudtrail:0000324:ba2a63f7-e844-433a-8023-50616c46987", "row_index": 324, "timestamp": "2018-12-19T23:20:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2a63f7-e844-433a-8023-50616c46987", "eventTime": "2018-12-19T23:20:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0dUdleWdsem1BRGtYNm5OM1lOL0pvU29QVWZZZVdEb1k3QVpmTjdvWkdzU21lWXBqSE8yb2hjVWVENFNSSlQ2aWE5Myt2SFZseHhDU1p2L0xaR1FobEZQRzdTWHFHRm5xSTBzZ0gxZG1McXBIT1hoR3ZnOTRVRE1sK2RGOUxlK3BLZlJyN3NJdVBzYTRKQ2NsNEJ5U3h4ZWM5amUvcmZsOWQxTlhNZE05aVJ2dVZxUWFZZlVQaldZa21hb0NiY3FKOXhPWFFKQ0FKNzBlZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06cefcf6-7eb3-4776-8c7b-bdf7f71f93cd", "record_id": "flaws_cloudtrail:0000325:06cefcf6-7eb3-4776-8c7b-bdf7f71f93cd", "row_index": 325, "timestamp": "2018-12-19T23:20:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06cefcf6-7eb3-4776-8c7b-bdf7f71f93cd", "eventTime": "2018-12-19T23:20:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGZmRkOWpsWngxTHlSWVJZRnkzUllFeVlXV0ZHcXh6WDBQcTQxaVFETitRamtzWjVlaWtLeXpNQ1NzNFVJV1JQdGdhQTNqc0MwWVN4RG96SitDNmNFWkJsdUtOZlkvZW9BZkgrYUFycXU1K0dNdzRESGVDVnVrS3RuM3FBTEFHR25WQ0dYN1pLZE5sMW9HMkVsMXJ0c294VEYyRlZGc3k4TnFuODhZRGVNVFVjNU9BSFg2Yy9lL2MxeStuL3NoQVpqQlRvZFdlSno5QWN4UURVUkVVaGpuejVWUVpLUkU4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e413dfe9-40d1-4ebd-835f-7e65acda6c5a", "record_id": "flaws_cloudtrail:0000326:e413dfe9-40d1-4ebd-835f-7e65acda6c5a", "row_index": 326, "timestamp": "2018-12-19T23:20:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e413dfe9-40d1-4ebd-835f-7e65acda6c5a", "eventTime": "2018-12-19T23:20:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3MWVYUzNNNTBvZ1NOR3hRb3BnV1NEMTJzQUhwMDJqL2FzYllpdVhZdlNwRW1GL3BWdVlUOHJjQ1VCVG94aTc0dGI3Y0RXL2IxQmpUL2ErR0Y2Z3NKbitEbzdVL08vcnBOQ3lPUkJ6UUU2STc1MGRqMHJScHhPZUFmc3NFdnhkV1dzN1E3WXF1eXhLdE1jdm1wV21NL042djNBYWdMOWkvUUlNUTFDN2dlczhiVEc4YTdFNHc1QklDdWdSc0JSZGFKR0tiK2NiWHBLNXVuQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e56e397-ffb5-46a3-ad53-2eb3da6fa886", "record_id": "flaws_cloudtrail:0000327:3e56e397-ffb5-46a3-ad53-2eb3da6fa886", "row_index": 327, "timestamp": "2018-12-19T23:20:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e56e397-ffb5-46a3-ad53-2eb3da6fa886", "eventTime": "2018-12-19T23:20:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1c21pRzNXNmJ1TGoxSit1eXlzY3RvSlA1TEh5aHVBd29ydnRrSkl6TUljVjdNc0d3cS9BVkpyNzdtRlhKUXp6SnNjbXZTZGlHVGN2cUlJb2dpQ3RrYk0zQnJmTUtvZDhOYk05Nlcxb0pOWEIvR2E1QTZTTDR4RGhEK3NNeGduUkNsNlJ3elhtMitscmVCNFBoNG1laitjZlpVS2Q1NUJQWjFkWksrbTM1OGkwTVFhcm1PR3BhSVA0QzNzcURQR01ycW1qRmwzRkhySVR6b3hjQ2RnVmNjbmN4WWFVbTVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef1b9c34-a220-47c8-baa5-3d3523a6525a", "record_id": "flaws_cloudtrail:0000328:ef1b9c34-a220-47c8-baa5-3d3523a6525a", "row_index": 328, "timestamp": "2018-12-19T23:20:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef1b9c34-a220-47c8-baa5-3d3523a6525a", "eventTime": "2018-12-19T23:20:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZZHRqOWd4eEo3bW9QdU9yemttUXpjcEUvelYybEJEMUkweStzR2hEVHRJQU1Yc3BKQlVDNWZrOFFoc2JhUjUyYjRoRGhEMnVnUEozeHI0aUprODdkQVVOUENYbUZTRTFnaUdiSTYySDVOQU15TWduSTA2QnF6T1ZYRE1KMG0xUjNPNHI0RFZQczdEYjBUc09IbUdUUE5hcHBiK205RlJ5YmIyR2ZLekJLK080SGJnR243ZzVXek9yR2o1WUkzV2JEbVVrY0FUUkZIMUdXTitPbHhKM2U1N2pQWDhUY1hVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d53e6d3-e37e-427d-b540-7848dbde4a86", "record_id": "flaws_cloudtrail:0000329:6d53e6d3-e37e-427d-b540-7848dbde4a86", "row_index": 329, "timestamp": "2018-12-19T23:20:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d53e6d3-e37e-427d-b540-7848dbde4a86", "eventTime": "2018-12-19T23:20:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvemtqZS9CZmVaYzhaSDdlQzE4SXF1T29IcnFKODFkTkdpVTFqSkk5WmcwaFRqdXBFTW03K1BSQ1VPSDNyVyt1UWx4V1JVbVlxaFdpZlVhNEN3dUNFTWlDSERoNEZZdVVpMWt6bHF5WVhFMG5nL0EzRmlWaHdKZTdqdmxVYmVCVnVsNEoyRzhRMHV3T20rV0dHcUE0YzUwbm90UEdzQzY5ek1BaE83NnN1aGVHRENCa1kzT2xqa1BDN1E3STVwdVJaZDhWanlRLzE1NnZWMEVkMjlNV2hRdFA5cnFaQ2Y4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aab3619-4c71-4fd6-a2eb-c1def7369114", "record_id": "flaws_cloudtrail:0000330:5aab3619-4c71-4fd6-a2eb-c1def7369114", "row_index": 330, "timestamp": "2018-12-19T23:20:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aab3619-4c71-4fd6-a2eb-c1def7369114", "eventTime": "2018-12-19T23:20:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeDdGNnI2WXdwc3pjWU9QR21sZjVWbGgrdWk2MnFLMjdDUW55ODJzZ0JyR2s5dFY1MHNscFdoR2o0YXhZZzVvaS9neGZyRlhnRjQ2R1dONUg0K05GdkhOUlVHYW1LT3NXOEhoWWtaV0Q0a0ZTOHRpNmJ1R3BFNWNxaGZtRnU2d0ZiVFMrcXViUy94K3ZXN1F2UFJ1RHltZ0NsblN6YlNERjVMMDVjdzYzYU9XWTFlWGZOd1F5emY2MSsyMHhhbjBUZ1pIMXQ0K2w5YUNCWFQ5VFJxQjhHYzBpWWhDQ01JPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89d20c0-a8be-474f-9052-40c76a0505d9", "record_id": "flaws_cloudtrail:0000331:b89d20c0-a8be-474f-9052-40c76a0505d9", "row_index": 331, "timestamp": "2018-12-19T23:20:52Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89d20c0-a8be-474f-9052-40c76a0505d9", "eventTime": "2018-12-19T23:20:52Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cc43511-b5b7-4426-bf53-493fd672b28d", "record_id": "flaws_cloudtrail:0000332:6cc43511-b5b7-4426-bf53-493fd672b28d", "row_index": 332, "timestamp": "2018-12-19T23:22:08Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cc43511-b5b7-4426-bf53-493fd672b28d", "eventTime": "2018-12-19T23:22:08Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "846c19c8-b58c-4814-926a-c8242099ce69", "record_id": "flaws_cloudtrail:0000333:846c19c8-b58c-4814-926a-c8242099ce69", "row_index": 333, "timestamp": "2018-12-19T23:22:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "846c19c8-b58c-4814-926a-c8242099ce69", "eventTime": "2018-12-19T23:22:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7af55c-c4b0-4871-ae01-f02ef77c7197", "record_id": "flaws_cloudtrail:0000334:6a7af55c-c4b0-4871-ae01-f02ef77c7197", "row_index": 334, "timestamp": "2018-12-19T23:22:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7af55c-c4b0-4871-ae01-f02ef77c7197", "eventTime": "2018-12-19T23:22:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTTHlHYlVpdnBMdVorQUdrVDZSdTk5bHUreDlXNHZMZGhDNVBGaWZmejJsaFFwbHdmK08zdzA0RnRMQngxdDc4N2VZTXk2TDVXaVJNU0ZNZWJxVHdGU0xRS2tHc2YxRTVjd0JJa0w1THdQTlYzZUsxUHBwbDZsdk9PdUorZS93Ulc4ZEkvYnE3bXM0bGRoTCtrTkRwUTc5Ni9sQkdCUzlHODlMWmI4WkRRS0x5YUgxR285bHFDMDVSd21jcm5sRzIrczhlMGV4emFxdWRMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d970e9ca-2d8b-463e-b2bd-bbfa2986320e", "record_id": "flaws_cloudtrail:0000335:d970e9ca-2d8b-463e-b2bd-bbfa2986320e", "row_index": 335, "timestamp": "2018-12-19T23:22:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d970e9ca-2d8b-463e-b2bd-bbfa2986320e", "eventTime": "2018-12-19T23:22:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmUXFmYTZJNy9YeXdYdmdXMTF0RDRhOE03RlZHYmZROVBFQTA2MFlLWUJNOUNqa0tyMXJKUGlpZmtUTGZRdzYzT1lPNjVuckI2a0JpaCtaMlk1Z2RpZTBIaExKb0xtZnVNTDJEOHVJVHFDTlM4djBPckxSYnJDTGJSTWQ5NVZFVGt2dTRDRnBEMHdqekUxV0s4UUtUYkJ2OHV3OWtzRlMySmY2VUx0emFSZFROWExTUkUzcnVrN2ZEK3NzSnJIbGxnMkdxNVQ2Y0x3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5f97e48-6357-459f-9f59-e4ee747e6ed8", "record_id": "flaws_cloudtrail:0000336:c5f97e48-6357-459f-9f59-e4ee747e6ed8", "row_index": 336, "timestamp": "2018-12-19T23:22:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5f97e48-6357-459f-9f59-e4ee747e6ed8", "eventTime": "2018-12-19T23:22:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGWnYxdTQ3ZWxFcUdreVJEejBVWDBvK2tvcEd0V3plNEM2VVJpQ3FTTzIxR3VjN0FDVTNrU0FFa2tCdGxoUHNmOWlJNi9ZN0JtVmYvUXQ5Q0RQR0M0cnlmQkZxT3ZMQUplQk11V1ZPaFhOSGNPY0RPbWlZR3NacWpMbEl2WGJUbnJCY2ExQVBIRXBlditORktveTRiSWtadmRpMmRJeVJRbkJrR3JFSkxra2ZNa0tENFdwNk5lblpJVHYwY0cyWjR2cm9vZWVxRXNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90006ac-8782-41a5-a931-c018876bea6c", "record_id": "flaws_cloudtrail:0000337:90006ac-8782-41a5-a931-c018876bea6c", "row_index": 337, "timestamp": "2018-12-19T23:22:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90006ac-8782-41a5-a931-c018876bea6c", "eventTime": "2018-12-19T23:22:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJua3g4cDlTckdXdGJheGtUb1hSUk92Z2l0aytKSzhNL2hrMXhscHp4R2ZsSE5BMTZYQnZPWGVnbEpWcFp1K1EyQTVGeGtaZGxrbTR3OHhrd0FOMjZ4bHZ1UzFFWnY1aXJsa2Jqd3RpTFFuOC9TNDhUS3p3TUxseHB1Yk4vZ1VTdFF1TEY3S3psbG9TRWpSWG1rOGhVR1hveW1EcEVJVDQ2UldXc1V2Y0hQTVVDSXJiemhyR00rZythZWdTbVN4amFQYndpU2twTUFCVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e06a339-d153-4fa8-bb26-22c71051b536", "record_id": "flaws_cloudtrail:0000338:7e06a339-d153-4fa8-bb26-22c71051b536", "row_index": 338, "timestamp": "2018-12-19T23:22:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e06a339-d153-4fa8-bb26-22c71051b536", "eventTime": "2018-12-19T23:22:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIYmRyRkE3UnhtbjFHVlZGTFoybVE3ZEhUUFZTaUNvRVBDUTc4OE5ldlpnbzFzclppL2RYd0JQa01ncVRTL0hZS2kvSC9kS0QvM3dEZnhhME96NVcxengwNkRhM1Izbm03OXl1TS9DZzZIb1JFWUZobUxqQkJsVzZDek11WFdRcFBmV2I3UzBsMThJWGVPQ3p3YVI2TDBLRXNnZjVUT0R4L0p0SDkzcHpaWk1SbjZhUEVsRkxJaFkzUyswTUN4SDdoNkRnRHBXOGpXWXJFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf28929-1bc3-41f0-b427-1782db827cd2", "record_id": "flaws_cloudtrail:0000339:6bf28929-1bc3-41f0-b427-1782db827cd2", "row_index": 339, "timestamp": "2018-12-19T23:22:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf28929-1bc3-41f0-b427-1782db827cd2", "eventTime": "2018-12-19T23:22:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQcHMybHFxaWxLeHhmd1EvL25udjc1Wlp2WklNMHpBZUFNOHpCKzdrUjBKSk05ejB4VVN2WTlBT2ZJczluVWFsSmQwRlZJK0krbW5vRTJtbWpvWEUyYWx4TlVxY1VZSUhzbjdhenJpSXR6Mzg4dzFEREJDSCsyRnRrb0dGcjV2TzJtMzB2Z1ZXVUpURTZFdHBadXNmaHB3QVFUZy9ickFxaUl0aVJLYmVLYW5ZVWxZZmIrN2c2VTBHYnRUb0swN240aFFyamZXL3FRRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8daa07ac-51d7-4f71-ab46-0122f9adf716", "record_id": "flaws_cloudtrail:0000340:8daa07ac-51d7-4f71-ab46-0122f9adf716", "row_index": 340, "timestamp": "2018-12-19T23:22:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8daa07ac-51d7-4f71-ab46-0122f9adf716", "eventTime": "2018-12-19T23:22:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4b0pqQnlNdDdQbHh3bXg3N2l6cWg1T2k2bHl0UTI0b2xmZlpvbHNSQkV5djVtZzErVG5WZTZvdlJUWm9PNDV0NFdHUmp2ZFpxcEt1M1NJcU5mVFprN2c5MndaTFRWeEJuRmNwZndqK2xjWUNLd1RBZS8xR3hTUXh2RFU2Z2FHemd3U1hwYktRRGV3ZmZtWlRRazVOTWRsL2JKT3lsd2NOMHZLclgvRHBQeXhZdVh1VU1ZY3ZaVXcyNnprYTBES1FQbmxOamMremZrdWxBZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717e6cf2-4b26-4d91-913b-9a8c99de65db", "record_id": "flaws_cloudtrail:0000341:717e6cf2-4b26-4d91-913b-9a8c99de65db", "row_index": 341, "timestamp": "2018-12-19T23:22:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717e6cf2-4b26-4d91-913b-9a8c99de65db", "eventTime": "2018-12-19T23:22:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLZjZxdnB2bkNheVJ5TTNyY2pvWmZmVEhBYXFxZEFGS2MwNzBpWHRZaVJzdGJGSGhMWTIyRnI3MWhMM3lmNDM0ZTI5b1Q5c1ovUjVhbU5QNkI5MHJlU3JqYWg4cmJxTWY0OTZ4V0NYdFRQd1FjQ0k1RkNabVNCbHJ4UEpQYzRmRjZOVGlDVFRNZHZOaFliTlJpOXB6U0MyNjhieVVHOEJhd1kvWTVEY1FyZ0tuRXU2ZzRzNW5zTGk3MWMvT0FLZXh2ZXJlS09tWUVKRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50bb3969-94a2-4d38-b0cf-f9351dd75f9f", "record_id": "flaws_cloudtrail:0000342:50bb3969-94a2-4d38-b0cf-f9351dd75f9f", "row_index": 342, "timestamp": "2018-12-19T23:22:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50bb3969-94a2-4d38-b0cf-f9351dd75f9f", "eventTime": "2018-12-19T23:22:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvL2d6QkpicHZlUkFFeW8vVUNYcFVyYnpLOFdDbk1TYlg2NjZVekRzd0lXa0FZUEo3N0NUaW9UaFY3WXNZbmJrYXYrMG9yZ1hpQTdNZUVsMWxDb0lUcnNTeTdyL2lUb0piR0VlVHRQOFJOdlQ1TWp4dVlnTmpoL2FTeEZwcVl6dFdlcVBJQkdpaXg2b3VhanFmcU94ZFJIQ0lvTGNZRlh3SlVEOGo3US9xM1hoRlBVSE9sWUxVVUJxcDFPL0h6aHo2Y2NhdDhWUldBNzBxUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e38d48f-9e18-44c1-94a3-c162b864711b7", "record_id": "flaws_cloudtrail:0000343:4e38d48f-9e18-44c1-94a3-c162b864711b7", "row_index": 343, "timestamp": "2018-12-19T23:22:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e38d48f-9e18-44c1-94a3-c162b864711b7", "eventTime": "2018-12-19T23:22:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUK1NkakY2b2dQNlozZE9iVVltSmk1YWdKVG5tVlFkRTBoQUcySUZDb0ZMbk1Bb1hJVHVtd090S1RmOEtESm82T0VsS1BVenAybG5WbkMvNHZqa3JmM1FDSEtOVm5IWFlBZ0RreWNQaDdmc1RPMzFibFhxQXlWd1dyQ28vT1ArM1BQeTNGejZuN3l3TjR4R3ljU2ZKY3E1aFY4MmtCSmIxSllPK3pJQ1J6NENBQWtSM1B6c1FZNkdmTFNUaXpaRkFBeGVsd3UwL25JVlBOQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6be47c5-5092-45a7-b51a-1cf8db14a51b", "record_id": "flaws_cloudtrail:0000344:a6be47c5-5092-45a7-b51a-1cf8db14a51b", "row_index": 344, "timestamp": "2018-12-19T23:22:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6be47c5-5092-45a7-b51a-1cf8db14a51b", "eventTime": "2018-12-19T23:22:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrcFJZajJ0OTdKcXZIME14WEhQUURRamQvOVBCVTI1YmlMbncrWHZhdkZaSlYxaUc0QzRvZitWeXZuVnNFb3JCOFRHcllURVVMZkJsN2lTNm01Mm5GbjYzN1l6WERNa0F1MVB1RGR3ZjVvQVFZUWRIa2pSeVFaeWYxYW56dm53emkwWkY2ck8zVlcwRllrbm5LSFlFUzFvSU5vM1JSQ2FaNlI4TENtNElyUHF3cHRESlNkaXh5UjFCQzMrQzdnYWFtQkQwUUZNWlVPbWMzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "211d575e-62ca-4dcd-88c2-bb90f6334ece", "record_id": "flaws_cloudtrail:0000345:211d575e-62ca-4dcd-88c2-bb90f6334ece", "row_index": 345, "timestamp": "2018-12-19T23:22:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "211d575e-62ca-4dcd-88c2-bb90f6334ece", "eventTime": "2018-12-19T23:22:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaN3lURmRmWkxMblZjZ1J6N0dCNXhoVzBoMHRJUmxGOUVGVDNDbXdvUXI4ZS9IWXZOYXo0Tng4eHcvUW1QaDQrY2lMcmNUakcyM2ZhaGxnMTRzaUdIeWcvTW9UQXRKSE1Qb0s0M3Vsbm4vQlZPd3FNcUtHMktoMkxGZ0FSZUwwMENidE1rME9HRThiZmJoSHh4bThUQmVqdjV6MEtnTS8wM3ZiRGc3dHZIYTJ1QWJkaVJqSjFCd1J5U2xsVHJ0dnRWcWtPbkxWWkIyckdkQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a59e00-b5d6-4a6a-ae65-39b1db91b52f", "record_id": "flaws_cloudtrail:0000346:b7a59e00-b5d6-4a6a-ae65-39b1db91b52f", "row_index": 346, "timestamp": "2018-12-19T23:22:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a59e00-b5d6-4a6a-ae65-39b1db91b52f", "eventTime": "2018-12-19T23:22:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZc3ZJb3IzSytpUW9uQ0I5OVBTRXdYZGJud0hML0Y4QUQzOERkdU1LNjZJdXpxNXJpN2lkOFFodStjd1RoZFZqU3pMU1VGeGFvMG8zR0lKN1NHKzYwMkZSVXRrSnBDdC9yWVkyeFQ3RkNmT05qTHdtMGpkU0d5aG9taWQ3TkVyK2RyZWZNVWN6VWM4NXFmUTg3ckhqbytxOTZUdEN6S2VCT1JkMW5rZ3B6M3Nrb2VWdUFXMnhlR0tNeTZTaXFCRUd6OFJuTWVGb1JpcVFmZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18805-39a9-457d-bbc6-9c72b621cca6", "record_id": "flaws_cloudtrail:0000347:18805-39a9-457d-bbc6-9c72b621cca6", "row_index": 347, "timestamp": "2018-12-19T23:22:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18805-39a9-457d-bbc6-9c72b621cca6", "eventTime": "2018-12-19T23:22:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQTEdXbHFOVFJHZTA0U2h3Z2NBWEFLcXJqSk93WW5DbUd3T2QyaW5zd3JvTnRHZTMrNElMblNOdHg2eGlwU0piU0tqSW5SS0lLd1Q3OHl4MW1aK2tSeStXSGwvUDVtZ2JaRzdHZ1RPditiZHcyUTdiVDhkZXZrb3BONVllSmw0NHJZZWVRVFhIT214djZuYjU2bkkyS2gzazMraE1na3pQWERvQVVvNWdsdVZBZjN2SHpzekFVNTExMnlESFFQdkYxbUVLeGVDTTFCZGdZVmNOQ1NHdHBOLzhLalFyNG1NPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21d772c2-924c-4a54-8ef0-d457b6e14b2a", "record_id": "flaws_cloudtrail:0000348:21d772c2-924c-4a54-8ef0-d457b6e14b2a", "row_index": 348, "timestamp": "2018-12-19T23:22:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21d772c2-924c-4a54-8ef0-d457b6e14b2a", "eventTime": "2018-12-19T23:22:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoUlN2S2ZwZUVRdGFMQUhncXRnazdaSjE3YWNqT3pRdnFPYk1HN2ZiUHE4aXdORTh1TUNuSjlYcHJqSnRndjI2T0orcS9qd0ZTMkZaUHF3ZDZkN2s0QW13a09Ndm5hc1VhVGNvM1lnVzI0OGxQb1NQdXF6dXJib1RkU0FNbVJsR3gwQ01qMlkyejVTd0UzTFdJekVsZ2hOckJ3SC9sQjBjS3g4bEdBbjJNMkVKcG1SSWw1c3lpUkxNTWtsY0p3YnhUdkNMRTA5VC9wOERDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa05dd5-99fd-427f-9e11-28fd557f9cc4", "record_id": "flaws_cloudtrail:0000349:7aa05dd5-99fd-427f-9e11-28fd557f9cc4", "row_index": 349, "timestamp": "2018-12-19T23:22:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa05dd5-99fd-427f-9e11-28fd557f9cc4", "eventTime": "2018-12-19T23:22:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvY0dQejM3NmpvVUdPdUVGYUJtMm1seGtwK1hQTzhHNDd4cDFkWTFFbDdML2xPb0RSTXYvOHRYdEF2RjE3WmpFTTVuK0VwWUNJU2NZOU1CWjFBeWN6TUt3WGdkbityeWJ1d0RadkUzTjVOSUNCS1VDa0MxQUZoTVZoNXpOMkVoeVMvcUJKcitndTlTY2JXL2dyTUUzU0JYUUdpOEVCd3VyMFkyMTBlRmZ1WU5yczcwb2lpNEpnMnZpK05UbHZURjdZVUhoVHZidHRNaWdFclMxV2wrcENZaUVtSXg4eVJBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63eeaa67-16cb-446b-ab50-ff243944da7", "record_id": "flaws_cloudtrail:0000350:63eeaa67-16cb-446b-ab50-ff243944da7", "row_index": 350, "timestamp": "2018-12-19T23:22:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63eeaa67-16cb-446b-ab50-ff243944da7", "eventTime": "2018-12-19T23:22:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVV1ZucE54SnJydnNMYVlXZUxBemwyWmlsK3JxSHQ5K1J6dDA5Vmdkays1eDNoZkFvS29DMEtPOGZMZERsSkFVNytyYU55eGV2SU90WGJkQmRkOUFyR2FlRk9xQmFiS290YzlEUU1IWEJhWjdoQkpTV2l3Z1ZDUys5S3F1Mkd4cXFPdEZIeHZRa28zbE5Jc1Nqa241U0d1UEJVNmExUmRGc3RrOUlDRmFPRWNVSjRKc2JBakxGUHhwa3dRdVJ2NFRaK1NqemlRTnlVV3RCUi9uVHFsM29qVm8rV2ExWFBzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfcd603f-f0fa-475a-83f6-84cecbd33c56", "record_id": "flaws_cloudtrail:0000351:bfcd603f-f0fa-475a-83f6-84cecbd33c56", "row_index": 351, "timestamp": "2018-12-19T23:22:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfcd603f-f0fa-475a-83f6-84cecbd33c56", "eventTime": "2018-12-19T23:22:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrd0ZxdC9OVXEwbWtSZzdEblp1bkc5ejBSMHRSRHpQU1pna293UlUyT1I3MzNRbzJGa2xmSUdmb3ZtdlVvaTFoRGdwNFVrazR1NCtpV0tkdk5kaW4wQ2tsWFNwbTQrUHd6aDdHQUQyVFFtNm9KOUo4TmR6eWFnVytRb3JGT1F2NThVSEpXNlNiK1YvcTVZUnE0QnJaRTUyb2RoMjUwRjVQZ0NQNVd3aXNiMkJEUjZ1ekVObWxYTHJHdXUzMjgxb1Z2dE9mMGc0V0hpZ2gxNkNlTm94RUVzVnN2bW1PL1ljPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f2f520c-e218-43aa-a846-642b4bd014e8", "record_id": "flaws_cloudtrail:0000352:4f2f520c-e218-43aa-a846-642b4bd014e8", "row_index": 352, "timestamp": "2018-12-19T23:22:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f2f520c-e218-43aa-a846-642b4bd014e8", "eventTime": "2018-12-19T23:22:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzNGw2UFcyYmRTQllGZENWdGxvaUhyZ0JWZjkvMURoQzJwMHgyTExxSVhsVE05UU5nd21yalVuVWhWQlZ3bnM0c3Z4UzJnU2ttRjJMcFkvVXBIRHNXT1czL3pGVWh0c0VnNDh1bm9pQitvUlJBMVpXdXJFblVFOG9ZKzFURUo1SDRjbDFYYTNLaUJ3N2psZ1djSTJrdEYxaFB4UHB1MkpyOE5LWEpzdjh5d2t6Y21xdTQ5SHRGMUNBRnFVOG9EVENpNzBFTjJxZlVpdEkzRitFSWpEUHczblFGdWkvY280PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0827d9-27d7-4723-93e2-a8cf937f7f8d", "record_id": "flaws_cloudtrail:0000353:8a0827d9-27d7-4723-93e2-a8cf937f7f8d", "row_index": 353, "timestamp": "2018-12-19T23:22:38Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0827d9-27d7-4723-93e2-a8cf937f7f8d", "eventTime": "2018-12-19T23:22:38Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ac959d-1654-4a3d-9b1b-a9f54715392e", "record_id": "flaws_cloudtrail:0000354:56ac959d-1654-4a3d-9b1b-a9f54715392e", "row_index": 354, "timestamp": "2018-12-19T23:23:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ac959d-1654-4a3d-9b1b-a9f54715392e", "eventTime": "2018-12-19T23:23:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ace6fa2-fd13-4d7d-ad95-483993f7f139", "record_id": "flaws_cloudtrail:0000355:6ace6fa2-fd13-4d7d-ad95-483993f7f139", "row_index": 355, "timestamp": "2018-12-19T23:23:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ace6fa2-fd13-4d7d-ad95-483993f7f139", "eventTime": "2018-12-19T23:23:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXc2M0eCtqYlU4SGdWVmRUeFg2YXNCVkhqVmNteGxvSzAyb1RrUkJockFyU0YxL0FLd1JBazNFTTd0SW9hNC9xY2tPNjBlZTJuL0pLdnBWN0FpUGtNQzlYWk1tWlBkTmpJblRjR3RIUEQzNTZSRnlpNnFLM0JtUXZsSVhoWGw0ejdtckFuWnBMd1Z2VHZiWVZ2aU9meUpOaW1oTzBDWHBFYVlwU05FUGp3T3FFMXhHeDYwN2ZvdjM0RHN3RkxMNU5mN09JcGJDaVFhWTNQQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06727eed-9085-4711-a11c-c92c2c280f0b", "record_id": "flaws_cloudtrail:0000356:06727eed-9085-4711-a11c-c92c2c280f0b", "row_index": 356, "timestamp": "2018-12-19T23:23:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06727eed-9085-4711-a11c-c92c2c280f0b", "eventTime": "2018-12-19T23:23:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJucXk0WGZ3bit0UUo1dGdEOWI1ZlNlK1Fqb3hPU0ZKWHAydXB0SlZha3RUY0xRb1F1aU40ZGRPQ2xzSW1idk5idjdXY01UK1c4VU8rdXlEaUhkdWFGZlpEcllaVW82RVllc2t2dTdyRFFZUGJjT3dtQm5ERDlCRTQ1YzljeEtKYjNERXZuTktsdTFNS2UreUpBNjlmNWpiTnRsOCs1OVdOSVVyMXJrVmdaOUZTaWxVWWFnNHYxN3NVVXBuSkRSM2x3SmdGVkZLUWdVWEhMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be34efca-bdf3-410f-a93f-c0ef39c07eb4", "record_id": "flaws_cloudtrail:0000357:be34efca-bdf3-410f-a93f-c0ef39c07eb4", "row_index": 357, "timestamp": "2018-12-19T23:23:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be34efca-bdf3-410f-a93f-c0ef39c07eb4", "eventTime": "2018-12-19T23:23:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04dc5f61-49b6-4b74-8433-96e3774e4dbc", "record_id": "flaws_cloudtrail:0000358:04dc5f61-49b6-4b74-8433-96e3774e4dbc", "row_index": 358, "timestamp": "2018-12-19T23:23:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04dc5f61-49b6-4b74-8433-96e3774e4dbc", "eventTime": "2018-12-19T23:23:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLZDhscWVlVFdpSCttc2kxWVBDc2FBaTlUSFFiREdWcVArQkthOWhHZjVwNncxV0NjYm9nRGprdkpjajFTMm1mVk5rQlZEM1JuUWpqYU5kQ0ZtRjZCcFJZR2I5bmJOcDlIV01lRlZ4bUZnSFZkSjdJajRIMVZ0QU5FY3NaUWp4bVhxdldMZjN0TDcvTTRPdGNaRFZEeWo1UkRkV01WYnNmdjVQZk5SaE1qRXMwazFGRUhZTzN3Mis4VWJ5UkU3cVJwM2sxekc4R1lSdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26f4d4b0-c8ea-48f7-a94d-b50fc1e7a43f", "record_id": "flaws_cloudtrail:0000359:26f4d4b0-c8ea-48f7-a94d-b50fc1e7a43f", "row_index": 359, "timestamp": "2018-12-19T23:23:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26f4d4b0-c8ea-48f7-a94d-b50fc1e7a43f", "eventTime": "2018-12-19T23:23:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6TDBDT2Z4NmR0cHloUnc4bTlyc0UxQXhnQVh0Yi9kOUNmd1JqcWZKMW84WU9YUk14Ym9RWGtRWnFJZ29nYTBpZ2Iwdnk0VVpWVWM4aURVRnVHa2t4V2V3OGpoMnM1ditjQ1ZHeEorUW1RdGEzRldBZ0Q3ZEMzekJ3Vm1Zd0UvR1VYYnFHTE9uYU9FZE00OVJwaXlZNWliYU5CWURzR296aHprZW5MZjhEZnVFcUtBUHp6L0VmMjY2UzBQRE52MmFEVXBiVkNYUWR5Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e40272-386d-42fd-9a7f-d0c486650f2e", "record_id": "flaws_cloudtrail:0000360:e3e40272-386d-42fd-9a7f-d0c486650f2e", "row_index": 360, "timestamp": "2018-12-19T23:23:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e40272-386d-42fd-9a7f-d0c486650f2e", "eventTime": "2018-12-19T23:23:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5UFdHZTlrbkwxeisya1U1Ny9TWnFVaDVSajVkeERBK01URUpxRWFnNmhDQ2d0UElSSjBheFBHbmNsUlJ2akNLWEF1emNBMXZwOVlzNmg4dzhDZEJvUGNnbVQwbjMraTVPenVmVExzSWNMalB1SXo0YlI0cXJSNUJSMjA3WDE4TGlOdGxyT0UwRFhicERmR3ozWThYZEdyYUpmN1pBaExMQWFWQzdUeWNyMWMzWi9ERWVwV3R0aWhldkFyWFVJaEx3SVQvRkRsd0ZCTjhIZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c6fd67d-43cd-47ba-ba3b-de27b6ab1cdc", "record_id": "flaws_cloudtrail:0000361:8c6fd67d-43cd-47ba-ba3b-de27b6ab1cdc", "row_index": 361, "timestamp": "2018-12-19T23:23:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c6fd67d-43cd-47ba-ba3b-de27b6ab1cdc", "eventTime": "2018-12-19T23:23:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0QjVWN1JVZmc5N2FNUlNQZi85ZnZtRnhLOGVTSFZGWlNhTzhudUdnMys0S2tUVzRRbm10R3VJdVRYMndOS3NVVllOTnlYRy9lcXZwYTdhT0tSWWZnaTdrbWNQRlVManlGMnpDSUNVVERVV3lQNzZnbklYQm9JbktiNGo0M1k5a2hEZU9yakdEc3dSWHJrVWRacHF3SXJwVFVqR01BMFkrcTdDQ3NiNGw1MUhQdlZnckw0c0E4YmY1THcxNUhQQittZTk3aTM2Wks3ST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2735c8f-22b7-44a1-bc8a-bf16f8ef03c6", "record_id": "flaws_cloudtrail:0000362:a2735c8f-22b7-44a1-bc8a-bf16f8ef03c6", "row_index": 362, "timestamp": "2018-12-19T23:23:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2735c8f-22b7-44a1-bc8a-bf16f8ef03c6", "eventTime": "2018-12-19T23:23:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQOFhJY2wxc0RPeWxmb2ZycnpFNnlUZjRDTkRaaEpibnZxZ1F0TndRd2hvYjVUckFBcndBK2ludzVSMWZ3VTBIdklDa0ZqZXF5S21CVE9oUE5uRkx3eFMxK20yelJ2YXIyVTQyR2lmZkk0VE9uRzBwdk1zbk5hS2xhN3NnRG1EMFJibWFXSzlsRmV3aUVSL0JBR3BNYS9SZkJNTXVZbEh1YUZveEZ5T3BpdWNoaVRsWTRLRktnZThXZGd1NVQrdm8wa1o3cTlTZlhXMkVVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a5ef88-008d-4c33-ab47-a72a2c8c0237", "record_id": "flaws_cloudtrail:0000363:c8a5ef88-008d-4c33-ab47-a72a2c8c0237", "row_index": 363, "timestamp": "2018-12-19T23:24:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a5ef88-008d-4c33-ab47-a72a2c8c0237", "eventTime": "2018-12-19T23:24:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzbGd2SmRIelpJM2hIY2ZsYml4OFhLNTJyekFKak9UWnNqZDhqVHJkd2haUE9UL1VYNzFTb1BLaTN3WUVVdnBmRXloeU9KUk9UZXNXYzFEM3g5Y1J1Rms3bW01djV6NkUzZ1NCMVBlNm5FSi9UTzNvT1E3NUtJbVRaNG5RZDFSdWU3S2xzcUJySC9ocU9GWHN3OXpZa1RNcHUxWTNMOGNJVmJBaS9TejJaVUJNcTV2L3BsaHhjQktHTFhJOGVCN3hCVkhqNjJacUlzQ1FkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded8bd76-5e93-4001-9422-04e258416f2", "record_id": "flaws_cloudtrail:0000364:ded8bd76-5e93-4001-9422-04e258416f2", "row_index": 364, "timestamp": "2018-12-19T23:24:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded8bd76-5e93-4001-9422-04e258416f2", "eventTime": "2018-12-19T23:24:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4OFJqV1pQaG1vclZDdmlONzlFYXBlQTkxZlMvdjVOeTBVeUtnOUo4U2VmL3ZFcUNYeFlSQ0xlZHVWTitFNzZSQjF2S2pCTzR1Y05MM2ZBU1ErSzFPQzdzQzZuMXBUQ2tWUnI5RzZwTHh0bkwvNS9rQzYrUEw0UjNDYm4yNFJ0b01tR1R2S0lIQTNaYkZCRU40UmxxNzdRWWE4cFJRbWQvbWYyZTV0SHZFUmJKRGIvL1Nidi9tQ0ZXVHJGOGpOZEluWFJFZ2IyTE43My9RQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43b095384-8482-4cc5-8054-b3504dc7e824", "record_id": "flaws_cloudtrail:0000365:43b095384-8482-4cc5-8054-b3504dc7e824", "row_index": 365, "timestamp": "2018-12-19T23:24:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43b095384-8482-4cc5-8054-b3504dc7e824", "eventTime": "2018-12-19T23:24:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2S0NTSlJBVGVIdmI2NmsyMnBNQ0FQbGE0MGE1bHVZMThBQkZjMjR5bmtiTTYrVlJkMVYrN0wvVlFUOWdOUU5WTzV4NnZ2S0FKZWR6bStNejlQV2xLTW9lOFo0K2kxcXJybC8ybi9GTFRzd2ExZ1BDaHZWb0dIa3pXYVhXS3czMFZQS0NIZWV0TkJnb09Nd1Zrc2JtV21zbzhLVlBMR2JnMklUK2xqTmFydkorUzZoOS9HLzdrYk5vVkhxRjEzQU9JV21leWw2bnplVWI0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84f9baa2-aa7f-46bd-bcb1-cbe86caedb8d", "record_id": "flaws_cloudtrail:0000366:84f9baa2-aa7f-46bd-bcb1-cbe86caedb8d", "row_index": 366, "timestamp": "2018-12-19T23:24:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84f9baa2-aa7f-46bd-bcb1-cbe86caedb8d", "eventTime": "2018-12-19T23:24:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtdnVqb0dhY2dIQjU4Y2VSNGFLRXpIejc5RU9HUjVhWkh2YzY2RHUyUmhpTFpFUXB3N056Ulg2WmpwWHcvb2crV1NmU1kwczY1Q2hZbTNqRUh6NTVkR2FKTnVrc0praEhvU2tsYlVtMXlKUmRucmxPSGNtZW1UdnI1VDdsRTc1MEZHeG1BRHN2ZlYyY1IyQzE5Zjd5dVN0MVJyQlFNMU50d2JoaVdaT0Z0UWxQUGtwb29QTTlaWElKL2o0UTJDTElBdlovbXpLeEVWc2VwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fab8c9d-3a76-4642-830c-e497cb572f09", "record_id": "flaws_cloudtrail:0000367:5fab8c9d-3a76-4642-830c-e497cb572f09", "row_index": 367, "timestamp": "2018-12-19T23:24:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fab8c9d-3a76-4642-830c-e497cb572f09", "eventTime": "2018-12-19T23:24:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0dmV1R0lZclFNWWwvZjRnREc0dzBoUjE0REh6ZlI1L29HOEp4NlpGZFN4dUt0dFhHVThIVm5tOUtTTWJWUlVvSk9XNE5CN1lwMjFEcDViQUkrK0MzSTJsQXVpdGhhczgxdm03RExFMTBnM2lPeVMxYjF4a0dXeTBoTmNrVG8yQURoK2NocFl4YlNuTXZvcWp3aWZBZm9iNXhEWDN2NlVnQzFnNWJjZE9ueWM1VXQyUzQ0ZHRYSVRoLy9mWmZtNE9HUGRVVlJUUVJJWEUyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6ea6a8b-c100-4cf1-bcc0-8f2321e17092", "record_id": "flaws_cloudtrail:0000368:e6ea6a8b-c100-4cf1-bcc0-8f2321e17092", "row_index": 368, "timestamp": "2018-12-19T23:24:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6ea6a8b-c100-4cf1-bcc0-8f2321e17092", "eventTime": "2018-12-19T23:24:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWVUU4QmxNV3g1WTE3bEs4MUFXa0w2Rk1MZU9TL0dxMkFwWXUxWjU0MVo3ZHJCeHNWczY0WmhKMFY5UkdkVG5rS2hRbjlValViWEQ1Wm04ZUNmZWczaGdNYWxqN0ljZTZLa2I2R3BZdUFpbUVNc2ZTVThIdG5mMEcweHJHQlhuWWxHQXB2ZEpRaFh0Z0hSSFdiZTlrbXIrcVF1Q0d0OWhabGhGRW9tNnZoNXBwdXZQdlVDRjRQdmh1bm1WU2tlUW1ZWWZOU1R2bjhhVXhHZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b3c0d10-03a6-452d-b3a8-59b3853d2d81", "record_id": "flaws_cloudtrail:0000369:5b3c0d10-03a6-452d-b3a8-59b3853d2d81", "row_index": 369, "timestamp": "2018-12-19T23:24:21Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b3c0d10-03a6-452d-b3a8-59b3853d2d81", "eventTime": "2018-12-19T23:24:21Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a371e9-3d74-42c8-8054-c57b378503aed", "record_id": "flaws_cloudtrail:0000370:d6a371e9-3d74-42c8-8054-c57b378503aed", "row_index": 370, "timestamp": "2018-12-19T23:24:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a371e9-3d74-42c8-8054-c57b378503aed", "eventTime": "2018-12-19T23:24:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "febca19f-6a47-422a-a0f0-f4f1fbae5ba2", "record_id": "flaws_cloudtrail:0000371:febca19f-6a47-422a-a0f0-f4f1fbae5ba2", "row_index": 371, "timestamp": "2018-12-19T23:24:41Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "febca19f-6a47-422a-a0f0-f4f1fbae5ba2", "eventTime": "2018-12-19T23:24:41Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_apigateways cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_apigateways", "userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf07f03-14c8-4f3e-870c-cd160fe8ae03", "record_id": "flaws_cloudtrail:0000372:abf07f03-14c8-4f3e-870c-cd160fe8ae03", "row_index": 372, "timestamp": "2018-12-19T23:24:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf07f03-14c8-4f3e-870c-cd160fe8ae03", "eventTime": "2018-12-19T23:24:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942852f81-adb5-483e-9e7a-2be538fb036c", "record_id": "flaws_cloudtrail:0000373:942852f81-adb5-483e-9e7a-2be538fb036c", "row_index": 373, "timestamp": "2018-12-19T23:25:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942852f81-adb5-483e-9e7a-2be538fb036c", "eventTime": "2018-12-19T23:25:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "914142c42-2aa3-4418-87dd-d567426a0499", "record_id": "flaws_cloudtrail:0000374:914142c42-2aa3-4418-87dd-d567426a0499", "row_index": 374, "timestamp": "2018-12-19T23:25:23Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "914142c42-2aa3-4418-87dd-d567426a0499", "eventTime": "2018-12-19T23:25:23Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "839794da8-c54c-4379-9fd2-9086e89d60eb", "record_id": "flaws_cloudtrail:0000375:839794da8-c54c-4379-9fd2-9086e89d60eb", "row_index": 375, "timestamp": "2018-12-19T23:25:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "839794da8-c54c-4379-9fd2-9086e89d60eb", "eventTime": "2018-12-19T23:25:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e1c17d-cc7a-445a-9ac5-14ba4583a3cb", "record_id": "flaws_cloudtrail:0000376:20e1c17d-cc7a-445a-9ac5-14ba4583a3cb", "row_index": 376, "timestamp": "2018-12-19T23:26:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "160.116.254.252", "user_agent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e1c17d-cc7a-445a-9ac5-14ba4583a3cb", "eventTime": "2018-12-19T23:26:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "160.116.254.252", "userAgent": "aws-cli/1.16.78 Python/2.7.15 Darwin/17.7.0 botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b38f71-9c11-4e73-af40-633667ad96", "record_id": "flaws_cloudtrail:0000377:06b38f71-9c11-4e73-af40-633667ad96", "row_index": 377, "timestamp": "2018-12-19T23:27:34Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b38f71-9c11-4e73-af40-633667ad96", "eventTime": "2018-12-19T23:27:34Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad91c5f1-9ef3-4652-90a3-f0e33df56deb", "record_id": "flaws_cloudtrail:0000378:ad91c5f1-9ef3-4652-90a3-f0e33df56deb", "row_index": 378, "timestamp": "2018-12-19T23:27:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.4.6.172", "user_agent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad91c5f1-9ef3-4652-90a3-f0e33df56deb", "eventTime": "2018-12-19T23:27:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.4.6.172", "userAgent": "aws-cli/1.16.78 Python/2.7.10 Darwin/18.2.0 botocore/1.12.68", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3dbe2a7-dada-45b8-aeef-8282d1684d4c", "record_id": "flaws_cloudtrail:0000379:d3dbe2a7-dada-45b8-aeef-8282d1684d4c", "row_index": 379, "timestamp": "2018-12-19T23:28:05Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3dbe2a7-dada-45b8-aeef-8282d1684d4c", "eventTime": "2018-12-19T23:28:05Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44ca5517-2cd5-442d-b8ff-13c5b4f4d362", "record_id": "flaws_cloudtrail:0000380:44ca5517-2cd5-442d-b8ff-13c5b4f4d362", "row_index": 380, "timestamp": "2018-12-19T23:28:38Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44ca5517-2cd5-442d-b8ff-13c5b4f4d362", "eventTime": "2018-12-19T23:28:38Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896a81a7-5a58-4daa-8ee6-ef4f404646cf", "record_id": "flaws_cloudtrail:0000381:896a81a7-5a58-4daa-8ee6-ef4f404646cf", "row_index": 381, "timestamp": "2018-12-19T23:29:08Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896a81a7-5a58-4daa-8ee6-ef4f404646cf", "eventTime": "2018-12-19T23:29:08Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f0c1d00-b188-4262-a188-2c8b64c2d90e", "record_id": "flaws_cloudtrail:0000382:9f0c1d00-b188-4262-a188-2c8b64c2d90e", "row_index": 382, "timestamp": "2018-12-19T23:29:38Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f0c1d00-b188-4262-a188-2c8b64c2d90e", "eventTime": "2018-12-19T23:29:38Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b180e0e-3d35-4395-8b08-51f9aae3f8f2", "record_id": "flaws_cloudtrail:0000383:3b180e0e-3d35-4395-8b08-51f9aae3f8f2", "row_index": 383, "timestamp": "2018-12-19T23:29:44Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b180e0e-3d35-4395-8b08-51f9aae3f8f2", "eventTime": "2018-12-19T23:29:44Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390168d8-f74a-450d-81e5-787153e6bf5b", "record_id": "flaws_cloudtrail:0000384:390168d8-f74a-450d-81e5-787153e6bf5b", "row_index": 384, "timestamp": "2018-12-19T23:30:31Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 545, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390168d8-f74a-450d-81e5-787153e6bf5b", "eventTime": "2018-12-19T23:30:31Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991cdacb-cc73-45b5-9d32-331f32e74557", "record_id": "flaws_cloudtrail:0000385:991cdacb-cc73-45b5-9d32-331f32e74557", "row_index": 385, "timestamp": "2018-12-19T23:30:52Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "101.3.3.148", "user_agent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991cdacb-cc73-45b5-9d32-331f32e74557", "eventTime": "2018-12-19T23:30:52Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "101.3.3.148", "userAgent": "aws-cli/1.16.78 Python/2.7.12 Linux/4.4.0-53329-Microsoft botocore/1.12.68", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v24"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "437165d7-e4c2-4148-9138-2449bb77a867", "record_id": "flaws_cloudtrail:0000386:437165d7-e4c2-4148-9138-2449bb77a867", "row_index": 386, "timestamp": "2018-12-19T23:31:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "437165d7-e4c2-4148-9138-2449bb77a867", "eventTime": "2018-12-19T23:31:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c040f6e5-067c-4c69-bd7e-a13b794d7cad", "record_id": "flaws_cloudtrail:0000387:c040f6e5-067c-4c69-bd7e-a13b794d7cad", "row_index": 387, "timestamp": "2018-12-19T23:31:26Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c040f6e5-067c-4c69-bd7e-a13b794d7cad", "eventTime": "2018-12-19T23:31:26Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c805b6d5-ac6e-402b-81a1-a972ce2d8fec", "record_id": "flaws_cloudtrail:0000388:c805b6d5-ac6e-402b-81a1-a972ce2d8fec", "row_index": 388, "timestamp": "2018-12-19T23:31:32Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c805b6d5-ac6e-402b-81a1-a972ce2d8fec", "eventTime": "2018-12-19T23:31:32Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ff7786-09fc-497f-a944-311d5a1bbfbf", "record_id": "flaws_cloudtrail:0000389:86ff7786-09fc-497f-a944-311d5a1bbfbf", "row_index": 389, "timestamp": "2018-12-19T23:31:59Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ff7786-09fc-497f-a944-311d5a1bbfbf", "eventTime": "2018-12-19T23:31:59Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b2a7dfa-4f36-4eb6-9e42-e23184f4871f", "record_id": "flaws_cloudtrail:0000390:1b2a7dfa-4f36-4eb6-9e42-e23184f4871f", "row_index": 390, "timestamp": "2018-12-19T23:32:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b2a7dfa-4f36-4eb6-9e42-e23184f4871f", "eventTime": "2018-12-19T23:32:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb76d7b2-2b22-42f6-933c-fc088285af4a", "record_id": "flaws_cloudtrail:0000391:fb76d7b2-2b22-42f6-933c-fc088285af4a", "row_index": 391, "timestamp": "2018-12-19T23:33:11Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb76d7b2-2b22-42f6-933c-fc088285af4a", "eventTime": "2018-12-19T23:33:11Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b1d03df-b864-44b9-bee7-7c6512491f3f", "record_id": "flaws_cloudtrail:0000392:8b1d03df-b864-44b9-bee7-7c6512491f3f", "row_index": 392, "timestamp": "2018-12-19T23:33:47Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b1d03df-b864-44b9-bee7-7c6512491f3f", "eventTime": "2018-12-19T23:33:47Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d562e5-237b-4a3c-a7ac-b2d281cede4d", "record_id": "flaws_cloudtrail:0000393:e5d562e5-237b-4a3c-a7ac-b2d281cede4d", "row_index": 393, "timestamp": "2018-12-19T23:33:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d562e5-237b-4a3c-a7ac-b2d281cede4d", "eventTime": "2018-12-19T23:33:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "[aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e0fd37-a68c-4258-8969-53d318ae1880", "record_id": "flaws_cloudtrail:0000394:f9e0fd37-a68c-4258-8969-53d318ae1880", "row_index": 394, "timestamp": "2018-12-19T23:34:33Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 512, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e0fd37-a68c-4258-8969-53d318ae1880", "eventTime": "2018-12-19T23:34:33Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76658c31-8218-4744-bd17-a4f077ac03ec", "record_id": "flaws_cloudtrail:0000395:76658c31-8218-4744-bd17-a4f077ac03ec", "row_index": 395, "timestamp": "2018-12-19T23:36:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 506, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76658c31-8218-4744-bd17-a4f077ac03ec", "eventTime": "2018-12-19T23:36:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66a6ad38-11a6-4781-b462-4d0e8a1ac958", "record_id": "flaws_cloudtrail:0000396:66a6ad38-11a6-4781-b462-4d0e8a1ac958", "row_index": 396, "timestamp": "2018-12-19T23:37:06Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 512, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66a6ad38-11a6-4781-b462-4d0e8a1ac958", "eventTime": "2018-12-19T23:37:06Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "126881c06-a3d9-4524-94b3-61d9ffd211fd", "record_id": "flaws_cloudtrail:0000397:126881c06-a3d9-4524-94b3-61d9ffd211fd", "row_index": 397, "timestamp": "2018-12-19T23:37:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "126881c06-a3d9-4524-94b3-61d9ffd211fd", "eventTime": "2018-12-19T23:37:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c109dbb0-61a0-4021-bc50-f5fc03ed0cfd", "record_id": "flaws_cloudtrail:0000398:c109dbb0-61a0-4021-bc50-f5fc03ed0cfd", "row_index": 398, "timestamp": "2018-12-19T23:37:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c109dbb0-61a0-4021-bc50-f5fc03ed0cfd", "eventTime": "2018-12-19T23:37:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ddb1ef2-0448-4472-a377-b22591e439e1", "record_id": "flaws_cloudtrail:0000399:4ddb1ef2-0448-4472-a377-b22591e439e1", "row_index": 399, "timestamp": "2018-12-19T23:38:44Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA130G5WX6SRVD67AQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "128.95.85.203", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ddb1ef2-0448-4472-a377-b22591e439e1", "eventTime": "2018-12-19T23:38:44Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "128.95.85.203", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA130G5WX6SRVD67AQ", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664feccf-2c8d-4cec-8402-6df0a75c88de", "record_id": "flaws_cloudtrail:0000400:664feccf-2c8d-4cec-8402-6df0a75c88de", "row_index": 400, "timestamp": "2018-12-19T23:39:20Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "153.230.251.0", "user_agent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664feccf-2c8d-4cec-8402-6df0a75c88de", "eventTime": "2018-12-19T23:39:20Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "153.230.251.0", "userAgent": "aws-cli/1.16.60 Python/3.7.1 Darwin/18.2.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4ef7a43-e119-4b3c-a66c-33aa0e093488", "record_id": "flaws_cloudtrail:0000401:a4ef7a43-e119-4b3c-a66c-33aa0e093488", "row_index": 401, "timestamp": "2018-12-19T23:41:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4ef7a43-e119-4b3c-a66c-33aa0e093488", "eventTime": "2018-12-19T23:41:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19ca4ed3-0b1a-4e69-b952-3fdd8450ea39", "record_id": "flaws_cloudtrail:0000402:19ca4ed3-0b1a-4e69-b952-3fdd8450ea39", "row_index": 402, "timestamp": "2018-12-19T23:41:16Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19ca4ed3-0b1a-4e69-b952-3fdd8450ea39", "eventTime": "2018-12-19T23:41:16Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834c49c7-fffc-4316-ad45-2da948d41ac8", "record_id": "flaws_cloudtrail:0000403:834c49c7-fffc-4316-ad45-2da948d41ac8", "row_index": 403, "timestamp": "2018-12-19T23:41:17Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834c49c7-fffc-4316-ad45-2da948d41ac8", "eventTime": "2018-12-19T23:41:17Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e77527-0724-44bf-8855-c8542b12c84f", "record_id": "flaws_cloudtrail:0000404:52e77527-0724-44bf-8855-c8542b12c84f", "row_index": 404, "timestamp": "2018-12-19T23:41:17Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e77527-0724-44bf-8855-c8542b12c84f", "eventTime": "2018-12-19T23:41:17Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae539c35-1bbb-4532-9c34-6b664481d0ace", "record_id": "flaws_cloudtrail:0000405:ae539c35-1bbb-4532-9c34-6b664481d0ace", "row_index": 405, "timestamp": "2018-12-19T23:41:17Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae539c35-1bbb-4532-9c34-6b664481d0ace", "eventTime": "2018-12-19T23:41:17Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd487ca-6141-4934-8df7-ecffa702e38a", "record_id": "flaws_cloudtrail:0000406:7bd487ca-6141-4934-8df7-ecffa702e38a", "row_index": 406, "timestamp": "2018-12-19T23:41:17Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd487ca-6141-4934-8df7-ecffa702e38a", "eventTime": "2018-12-19T23:41:17Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25b54dec-6bb2-4f52-80e1-7ac9ac52c6dd", "record_id": "flaws_cloudtrail:0000407:25b54dec-6bb2-4f52-80e1-7ac9ac52c6dd", "row_index": 407, "timestamp": "2018-12-19T23:41:18Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25b54dec-6bb2-4f52-80e1-7ac9ac52c6dd", "eventTime": "2018-12-19T23:41:18Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5a8349-0b18-4a86-a2c3-e6f58d7da2d4", "record_id": "flaws_cloudtrail:0000408:5b5a8349-0b18-4a86-a2c3-e6f58d7da2d4", "row_index": 408, "timestamp": "2018-12-19T23:41:20Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5a8349-0b18-4a86-a2c3-e6f58d7da2d4", "eventTime": "2018-12-19T23:41:20Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00e5fa80-0e37-4005-bb92-26764aa50d", "record_id": "flaws_cloudtrail:0000409:00e5fa80-0e37-4005-bb92-26764aa50d", "row_index": 409, "timestamp": "2018-12-19T23:41:20Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00e5fa80-0e37-4005-bb92-26764aa50d", "eventTime": "2018-12-19T23:41:20Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b0e11d-993f-4ce7-ba5c-10aadbdefec4", "record_id": "flaws_cloudtrail:0000410:79b0e11d-993f-4ce7-ba5c-10aadbdefec4", "row_index": 410, "timestamp": "2018-12-19T23:41:20Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b0e11d-993f-4ce7-ba5c-10aadbdefec4", "eventTime": "2018-12-19T23:41:20Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "218e499f-6722-4781-8209-604c6f7e2d95", "record_id": "flaws_cloudtrail:0000411:218e499f-6722-4781-8209-604c6f7e2d95", "row_index": 411, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "218e499f-6722-4781-8209-604c6f7e2d95", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e298a254-ea06-44c6-ba43-f76eab2c80e3", "record_id": "flaws_cloudtrail:0000412:e298a254-ea06-44c6-ba43-f76eab2c80e3", "row_index": 412, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e298a254-ea06-44c6-ba43-f76eab2c80e3", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb042cab-c9b0-4e4e-b338-883ba0461ebc", "record_id": "flaws_cloudtrail:0000413:bb042cab-c9b0-4e4e-b338-883ba0461ebc", "row_index": 413, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb042cab-c9b0-4e4e-b338-883ba0461ebc", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0854e056-542d-4354-8d89-a1d11603d7e3", "record_id": "flaws_cloudtrail:0000414:0854e056-542d-4354-8d89-a1d11603d7e3", "row_index": 414, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0854e056-542d-4354-8d89-a1d11603d7e3", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e129cd-6138-44d4-af24-7c3def761b00", "record_id": "flaws_cloudtrail:0000415:e8e129cd-6138-44d4-af24-7c3def761b00", "row_index": 415, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e129cd-6138-44d4-af24-7c3def761b00", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6befef71-16b8-45b7-a4e8-8ae9e50607e", "record_id": "flaws_cloudtrail:0000416:6befef71-16b8-45b7-a4e8-8ae9e50607e", "row_index": 416, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6befef71-16b8-45b7-a4e8-8ae9e50607e", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14bbd7e1-1ed7-4e35-94d6-59fd0b0edc3e", "record_id": "flaws_cloudtrail:0000417:14bbd7e1-1ed7-4e35-94d6-59fd0b0edc3e", "row_index": 417, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14bbd7e1-1ed7-4e35-94d6-59fd0b0edc3e", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "556c5d15-a02c-4ec6-b5c4-a02d82deb98c", "record_id": "flaws_cloudtrail:0000418:556c5d15-a02c-4ec6-b5c4-a02d82deb98c", "row_index": 418, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "556c5d15-a02c-4ec6-b5c4-a02d82deb98c", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40b86a9e-aa24-4406-90df-12901f0a72aa", "record_id": "flaws_cloudtrail:0000419:40b86a9e-aa24-4406-90df-12901f0a72aa", "row_index": 419, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40b86a9e-aa24-4406-90df-12901f0a72aa", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0c8d7b-9a30-4252-bc8f-5b88b2e96bd0", "record_id": "flaws_cloudtrail:0000420:6c0c8d7b-9a30-4252-bc8f-5b88b2e96bd0", "row_index": 420, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0c8d7b-9a30-4252-bc8f-5b88b2e96bd0", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52067ab-12fe-40ef-995e-18556fedc640", "record_id": "flaws_cloudtrail:0000421:52067ab-12fe-40ef-995e-18556fedc640", "row_index": 421, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52067ab-12fe-40ef-995e-18556fedc640", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef157502-0880-477e-a4a9-ef55659bd6a", "record_id": "flaws_cloudtrail:0000422:5ef157502-0880-477e-a4a9-ef55659bd6a", "row_index": 422, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef157502-0880-477e-a4a9-ef55659bd6a", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f7eb0f-3b2f-4944-b998-4d421260dd31d", "record_id": "flaws_cloudtrail:0000423:e3f7eb0f-3b2f-4944-b998-4d421260dd31d", "row_index": 423, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f7eb0f-3b2f-4944-b998-4d421260dd31d", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32b09217-0c64-4613-bf9b-cf1ced8de6a1", "record_id": "flaws_cloudtrail:0000424:32b09217-0c64-4613-bf9b-cf1ced8de6a1", "row_index": 424, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32b09217-0c64-4613-bf9b-cf1ced8de6a1", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d236032-7abe-4332-978f-e5524af2b1cb", "record_id": "flaws_cloudtrail:0000425:a9d236032-7abe-4332-978f-e5524af2b1cb", "row_index": 425, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d236032-7abe-4332-978f-e5524af2b1cb", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aad305f-6751-427d-9c3b-7ada501e6c94", "record_id": "flaws_cloudtrail:0000426:9aad305f-6751-427d-9c3b-7ada501e6c94", "row_index": 426, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aad305f-6751-427d-9c3b-7ada501e6c94", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98d1ac71-0e1a-4b4f-a183-6c85ad45a83f", "record_id": "flaws_cloudtrail:0000427:98d1ac71-0e1a-4b4f-a183-6c85ad45a83f", "row_index": 427, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98d1ac71-0e1a-4b4f-a183-6c85ad45a83f", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c0107eb-dc4f-486e-b96d-058ed9462692", "record_id": "flaws_cloudtrail:0000428:2c0107eb-dc4f-486e-b96d-058ed9462692", "row_index": 428, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c0107eb-dc4f-486e-b96d-058ed9462692", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc490ecf-e4e4-4c59-b2aa-8cebbbfed463", "record_id": "flaws_cloudtrail:0000429:fc490ecf-e4e4-4c59-b2aa-8cebbbfed463", "row_index": 429, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc490ecf-e4e4-4c59-b2aa-8cebbbfed463", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81fc0f1b-0686-4c50-8901-dacc2714a4e0", "record_id": "flaws_cloudtrail:0000430:81fc0f1b-0686-4c50-8901-dacc2714a4e0", "row_index": 430, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81fc0f1b-0686-4c50-8901-dacc2714a4e0", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484f3c33-e5b5-472c-acbc-f6ecb9f6b61d", "record_id": "flaws_cloudtrail:0000431:484f3c33-e5b5-472c-acbc-f6ecb9f6b61d", "row_index": 431, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484f3c33-e5b5-472c-acbc-f6ecb9f6b61d", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "170e5fbc-c643-4d8e-9566-130671a9bf704", "record_id": "flaws_cloudtrail:0000432:170e5fbc-c643-4d8e-9566-130671a9bf704", "row_index": 432, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "170e5fbc-c643-4d8e-9566-130671a9bf704", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e43056-4173-4411-9920-1c9bb4b08de4", "record_id": "flaws_cloudtrail:0000433:e3e43056-4173-4411-9920-1c9bb4b08de4", "row_index": 433, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e43056-4173-4411-9920-1c9bb4b08de4", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef1ea82c-e3a7-4464-99ce-6c8beb8b9190", "record_id": "flaws_cloudtrail:0000434:ef1ea82c-e3a7-4464-99ce-6c8beb8b9190", "row_index": 434, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef1ea82c-e3a7-4464-99ce-6c8beb8b9190", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9feddde-5db0-4768-9eea-afb8263e1bff", "record_id": "flaws_cloudtrail:0000435:f9feddde-5db0-4768-9eea-afb8263e1bff", "row_index": 435, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9feddde-5db0-4768-9eea-afb8263e1bff", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "464247b6c-d8bc-4f11-9b31-6e7bffdc6d7d", "record_id": "flaws_cloudtrail:0000436:464247b6c-d8bc-4f11-9b31-6e7bffdc6d7d", "row_index": 436, "timestamp": "2018-12-19T23:41:22Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "464247b6c-d8bc-4f11-9b31-6e7bffdc6d7d", "eventTime": "2018-12-19T23:41:22Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273aba39-af6e-4bd3-841a-4c3166b242ed", "record_id": "flaws_cloudtrail:0000437:273aba39-af6e-4bd3-841a-4c3166b242ed", "row_index": 437, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273aba39-af6e-4bd3-841a-4c3166b242ed", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a41bd97-0acd-4eeb-8ae4-7c6f0914cde3", "record_id": "flaws_cloudtrail:0000438:7a41bd97-0acd-4eeb-8ae4-7c6f0914cde3", "row_index": 438, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a41bd97-0acd-4eeb-8ae4-7c6f0914cde3", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce38a5a1-fba9-41f3-8dd1-341233de059512", "record_id": "flaws_cloudtrail:0000439:ce38a5a1-fba9-41f3-8dd1-341233de059512", "row_index": 439, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce38a5a1-fba9-41f3-8dd1-341233de059512", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071031c5e-209c-4ee4-95ab-b63cbf295b6c", "record_id": "flaws_cloudtrail:0000440:071031c5e-209c-4ee4-95ab-b63cbf295b6c", "row_index": 440, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071031c5e-209c-4ee4-95ab-b63cbf295b6c", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0d841240-dfed-4965-ad18-2332f966390", "record_id": "flaws_cloudtrail:0000441:c0d841240-dfed-4965-ad18-2332f966390", "row_index": 441, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0d841240-dfed-4965-ad18-2332f966390", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5410c10-20ec-4128-9478-32f8161f0629", "record_id": "flaws_cloudtrail:0000442:e5410c10-20ec-4128-9478-32f8161f0629", "row_index": 442, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5410c10-20ec-4128-9478-32f8161f0629", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d6f9f8d-cd65-43d3-bc05-aca430a27eea", "record_id": "flaws_cloudtrail:0000443:5d6f9f8d-cd65-43d3-bc05-aca430a27eea", "row_index": 443, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d6f9f8d-cd65-43d3-bc05-aca430a27eea", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90deeb27-d6ef-4eba-83b4-ac33884f", "record_id": "flaws_cloudtrail:0000444:90deeb27-d6ef-4eba-83b4-ac33884f", "row_index": 444, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90deeb27-d6ef-4eba-83b4-ac33884f", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec318c7-8180-492a-a263-5f8029e2f2fd", "record_id": "flaws_cloudtrail:0000445:8ec318c7-8180-492a-a263-5f8029e2f2fd", "row_index": 445, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec318c7-8180-492a-a263-5f8029e2f2fd", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eff7df8-8254-44be-b165-902f6f383432", "record_id": "flaws_cloudtrail:0000446:6eff7df8-8254-44be-b165-902f6f383432", "row_index": 446, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eff7df8-8254-44be-b165-902f6f383432", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3737c1da-ab15-47d1-8172-874c490403", "record_id": "flaws_cloudtrail:0000447:3737c1da-ab15-47d1-8172-874c490403", "row_index": 447, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3737c1da-ab15-47d1-8172-874c490403", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "297685f28-0ae3-4e04-a810-46dec6cf45b5", "record_id": "flaws_cloudtrail:0000448:297685f28-0ae3-4e04-a810-46dec6cf45b5", "row_index": 448, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "297685f28-0ae3-4e04-a810-46dec6cf45b5", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e2e2f57-5834-41c8-aa79-4ff33870ec04", "record_id": "flaws_cloudtrail:0000449:8e2e2f57-5834-41c8-aa79-4ff33870ec04", "row_index": 449, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e2e2f57-5834-41c8-aa79-4ff33870ec04", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1281ecc5-74e2-4413-ab08-d541e285158f", "record_id": "flaws_cloudtrail:0000450:1281ecc5-74e2-4413-ab08-d541e285158f", "row_index": 450, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1281ecc5-74e2-4413-ab08-d541e285158f", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd50efd4-9905-49cf-84d4-87bdcdc7f430", "record_id": "flaws_cloudtrail:0000451:cd50efd4-9905-49cf-84d4-87bdcdc7f430", "row_index": 451, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd50efd4-9905-49cf-84d4-87bdcdc7f430", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cfe6156-aa25-4b2f-9b94-a65895c", "record_id": "flaws_cloudtrail:0000452:1cfe6156-aa25-4b2f-9b94-a65895c", "row_index": 452, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cfe6156-aa25-4b2f-9b94-a65895c", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591f5f87-a7d2-40c9-87b1-0890c45b594e", "record_id": "flaws_cloudtrail:0000453:591f5f87-a7d2-40c9-87b1-0890c45b594e", "row_index": 453, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591f5f87-a7d2-40c9-87b1-0890c45b594e", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898755e3b-eb42-4c17-8d6b-f570e6337f45", "record_id": "flaws_cloudtrail:0000454:898755e3b-eb42-4c17-8d6b-f570e6337f45", "row_index": 454, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898755e3b-eb42-4c17-8d6b-f570e6337f45", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b7c6a62-cb7f-417d-aab7-00418aa0f582", "record_id": "flaws_cloudtrail:0000455:3b7c6a62-cb7f-417d-aab7-00418aa0f582", "row_index": 455, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b7c6a62-cb7f-417d-aab7-00418aa0f582", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371af106-aee2-472e-853e-4524322a694b", "record_id": "flaws_cloudtrail:0000456:371af106-aee2-472e-853e-4524322a694b", "row_index": 456, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371af106-aee2-472e-853e-4524322a694b", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f44b14a-e893-465e-82d1-6d159136", "record_id": "flaws_cloudtrail:0000457:5f44b14a-e893-465e-82d1-6d159136", "row_index": 457, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f44b14a-e893-465e-82d1-6d159136", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87067c-13f9-4c8b-b1df-e7d5a299b4e3", "record_id": "flaws_cloudtrail:0000458:87067c-13f9-4c8b-b1df-e7d5a299b4e3", "row_index": 458, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87067c-13f9-4c8b-b1df-e7d5a299b4e3", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb4a8a21-15f3-4f64-9287-d7a3382e05ef", "record_id": "flaws_cloudtrail:0000459:cb4a8a21-15f3-4f64-9287-d7a3382e05ef", "row_index": 459, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb4a8a21-15f3-4f64-9287-d7a3382e05ef", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdaa19b2-ba51-4fb3-9a3d-ad1f9df5010d", "record_id": "flaws_cloudtrail:0000460:bdaa19b2-ba51-4fb3-9a3d-ad1f9df5010d", "row_index": 460, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdaa19b2-ba51-4fb3-9a3d-ad1f9df5010d", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f149522-5dc0-431c-86b3-4285cc609c66", "record_id": "flaws_cloudtrail:0000461:f149522-5dc0-431c-86b3-4285cc609c66", "row_index": 461, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f149522-5dc0-431c-86b3-4285cc609c66", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519ef446-e69f-445b-948c-2c53e6a8a1eb", "record_id": "flaws_cloudtrail:0000462:519ef446-e69f-445b-948c-2c53e6a8a1eb", "row_index": 462, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519ef446-e69f-445b-948c-2c53e6a8a1eb", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb651f1-6096-4a8a-93a5-ed1fae0dd2ea", "record_id": "flaws_cloudtrail:0000463:1bb651f1-6096-4a8a-93a5-ed1fae0dd2ea", "row_index": 463, "timestamp": "2018-12-19T23:41:23Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb651f1-6096-4a8a-93a5-ed1fae0dd2ea", "eventTime": "2018-12-19T23:41:23Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9807cde1-7023-45d1-a22e-6ca626da8b07", "record_id": "flaws_cloudtrail:0000464:9807cde1-7023-45d1-a22e-6ca626da8b07", "row_index": 464, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9807cde1-7023-45d1-a22e-6ca626da8b07", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eec5956-dc08-4650-9e87-e2dc8bcaf8b1", "record_id": "flaws_cloudtrail:0000465:8eec5956-dc08-4650-9e87-e2dc8bcaf8b1", "row_index": 465, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eec5956-dc08-4650-9e87-e2dc8bcaf8b1", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "189c97d5-08f1-4a51-9ddf-f9f6bf33491d", "record_id": "flaws_cloudtrail:0000466:189c97d5-08f1-4a51-9ddf-f9f6bf33491d", "row_index": 466, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "189c97d5-08f1-4a51-9ddf-f9f6bf33491d", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a088eccd-e516-4de5-83e1-ed4d884e8cd8", "record_id": "flaws_cloudtrail:0000467:a088eccd-e516-4de5-83e1-ed4d884e8cd8", "row_index": 467, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a088eccd-e516-4de5-83e1-ed4d884e8cd8", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ec019c-0fe5-42a1-9072-fcb485d5bc4b", "record_id": "flaws_cloudtrail:0000468:69ec019c-0fe5-42a1-9072-fcb485d5bc4b", "row_index": 468, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ec019c-0fe5-42a1-9072-fcb485d5bc4b", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7095a729-c72f-489f-98e2-e2ef2b4c01f7", "record_id": "flaws_cloudtrail:0000469:7095a729-c72f-489f-98e2-e2ef2b4c01f7", "row_index": 469, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7095a729-c72f-489f-98e2-e2ef2b4c01f7", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b43902-8f6e-4d80-a1c4-11785f0f27d6", "record_id": "flaws_cloudtrail:0000470:4b43902-8f6e-4d80-a1c4-11785f0f27d6", "row_index": 470, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b43902-8f6e-4d80-a1c4-11785f0f27d6", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61c94e8f-940f-42af-8748-3c7be7e154f1", "record_id": "flaws_cloudtrail:0000471:61c94e8f-940f-42af-8748-3c7be7e154f1", "row_index": 471, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61c94e8f-940f-42af-8748-3c7be7e154f1", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467013-c33a-4feb-b72f-2598cde78ed1", "record_id": "flaws_cloudtrail:0000472:467013-c33a-4feb-b72f-2598cde78ed1", "row_index": 472, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467013-c33a-4feb-b72f-2598cde78ed1", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82d764983-413e-4863-8c7e-ce8b2da78e79", "record_id": "flaws_cloudtrail:0000473:82d764983-413e-4863-8c7e-ce8b2da78e79", "row_index": 473, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82d764983-413e-4863-8c7e-ce8b2da78e79", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6ef5d19-c8d2-40fa-b1c7-aecdb7996fb8", "record_id": "flaws_cloudtrail:0000474:a6ef5d19-c8d2-40fa-b1c7-aecdb7996fb8", "row_index": 474, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6ef5d19-c8d2-40fa-b1c7-aecdb7996fb8", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a552ef33-001f-414f-ab75-b28b4fb7b207", "record_id": "flaws_cloudtrail:0000475:a552ef33-001f-414f-ab75-b28b4fb7b207", "row_index": 475, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a552ef33-001f-414f-ab75-b28b4fb7b207", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64b5f3ae-2bdb-45f3-8c57-3fe3fb39abac", "record_id": "flaws_cloudtrail:0000476:64b5f3ae-2bdb-45f3-8c57-3fe3fb39abac", "row_index": 476, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64b5f3ae-2bdb-45f3-8c57-3fe3fb39abac", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404677c19-cc75-4fc7-93d6-5fd24e1cbf4d", "record_id": "flaws_cloudtrail:0000477:404677c19-cc75-4fc7-93d6-5fd24e1cbf4d", "row_index": 477, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404677c19-cc75-4fc7-93d6-5fd24e1cbf4d", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3574e75-c7bd-40ba-b670-a45cd1368d23", "record_id": "flaws_cloudtrail:0000478:d3574e75-c7bd-40ba-b670-a45cd1368d23", "row_index": 478, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3574e75-c7bd-40ba-b670-a45cd1368d23", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1ac99b7-b0da-478e-9486-e08e0b6838a3", "record_id": "flaws_cloudtrail:0000479:a1ac99b7-b0da-478e-9486-e08e0b6838a3", "row_index": 479, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1ac99b7-b0da-478e-9486-e08e0b6838a3", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49b70cb2-477c-475d-a1e5-4758da894266e", "record_id": "flaws_cloudtrail:0000480:49b70cb2-477c-475d-a1e5-4758da894266e", "row_index": 480, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49b70cb2-477c-475d-a1e5-4758da894266e", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb161477-bdbf-47b2-b15d-31bbde40d96e", "record_id": "flaws_cloudtrail:0000481:bb161477-bdbf-47b2-b15d-31bbde40d96e", "row_index": 481, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb161477-bdbf-47b2-b15d-31bbde40d96e", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd573d0-551a-40a9-943c-5305bb543374", "record_id": "flaws_cloudtrail:0000482:2fd573d0-551a-40a9-943c-5305bb543374", "row_index": 482, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd573d0-551a-40a9-943c-5305bb543374", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e38104f-e422-4024-9962-9b3ef32369a6", "record_id": "flaws_cloudtrail:0000483:e38104f-e422-4024-9962-9b3ef32369a6", "row_index": 483, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e38104f-e422-4024-9962-9b3ef32369a6", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dad887e-4914-4ae2-98da-fd00365321ff", "record_id": "flaws_cloudtrail:0000484:0dad887e-4914-4ae2-98da-fd00365321ff", "row_index": 484, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dad887e-4914-4ae2-98da-fd00365321ff", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8685aba9-bdb0-4e28-8729-f27936ab02a", "record_id": "flaws_cloudtrail:0000485:8685aba9-bdb0-4e28-8729-f27936ab02a", "row_index": 485, "timestamp": "2018-12-19T23:41:24Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8685aba9-bdb0-4e28-8729-f27936ab02a", "eventTime": "2018-12-19T23:41:24Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59d2cae-ef60-4bc6-b88e-8b1f784d1499", "record_id": "flaws_cloudtrail:0000486:d59d2cae-ef60-4bc6-b88e-8b1f784d1499", "row_index": 486, "timestamp": "2018-12-19T23:41:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59d2cae-ef60-4bc6-b88e-8b1f784d1499", "eventTime": "2018-12-19T23:41:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c98d7c41-07c0-4b60-a099-65d2dd6525df", "record_id": "flaws_cloudtrail:0000487:c98d7c41-07c0-4b60-a099-65d2dd6525df", "row_index": 487, "timestamp": "2018-12-19T23:41:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c98d7c41-07c0-4b60-a099-65d2dd6525df", "eventTime": "2018-12-19T23:41:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35ba0f7f-d31c-4fe7-8338-1a5f5aea6e25", "record_id": "flaws_cloudtrail:0000488:35ba0f7f-d31c-4fe7-8338-1a5f5aea6e25", "row_index": 488, "timestamp": "2018-12-19T23:41:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35ba0f7f-d31c-4fe7-8338-1a5f5aea6e25", "eventTime": "2018-12-19T23:41:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b2c5278-8d82-4c59-8c98-bf91eb0be3e0", "record_id": "flaws_cloudtrail:0000489:5b2c5278-8d82-4c59-8c98-bf91eb0be3e0", "row_index": 489, "timestamp": "2018-12-19T23:41:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b2c5278-8d82-4c59-8c98-bf91eb0be3e0", "eventTime": "2018-12-19T23:41:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "555a7248-0ee9-4c2d-bab1-705b5f710813c", "record_id": "flaws_cloudtrail:0000490:555a7248-0ee9-4c2d-bab1-705b5f710813c", "row_index": 490, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "555a7248-0ee9-4c2d-bab1-705b5f710813c", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37c50c0c-4d7a-4aa1-9687-816de60efb27", "record_id": "flaws_cloudtrail:0000491:37c50c0c-4d7a-4aa1-9687-816de60efb27", "row_index": 491, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37c50c0c-4d7a-4aa1-9687-816de60efb27", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f7578e9-5aa1-4f51-b18d-1ca886d663ba", "record_id": "flaws_cloudtrail:0000492:2f7578e9-5aa1-4f51-b18d-1ca886d663ba", "row_index": 492, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f7578e9-5aa1-4f51-b18d-1ca886d663ba", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7289fda7-33f7-47c4-bbb9-cef02ba673145", "record_id": "flaws_cloudtrail:0000493:7289fda7-33f7-47c4-bbb9-cef02ba673145", "row_index": 493, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7289fda7-33f7-47c4-bbb9-cef02ba673145", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fd0df8-13e2-4e54-88c2-c4d38631d408", "record_id": "flaws_cloudtrail:0000494:74fd0df8-13e2-4e54-88c2-c4d38631d408", "row_index": 494, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fd0df8-13e2-4e54-88c2-c4d38631d408", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d538de43-2abd-44cb-abb1-63e0dd3f6b25", "record_id": "flaws_cloudtrail:0000495:d538de43-2abd-44cb-abb1-63e0dd3f6b25", "row_index": 495, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d538de43-2abd-44cb-abb1-63e0dd3f6b25", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84945-db44-4d49-a522-c138cde02feb", "record_id": "flaws_cloudtrail:0000496:84945-db44-4d49-a522-c138cde02feb", "row_index": 496, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84945-db44-4d49-a522-c138cde02feb", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d6ce543-f53f-4850-af81-91a1ccd7559b", "record_id": "flaws_cloudtrail:0000497:4d6ce543-f53f-4850-af81-91a1ccd7559b", "row_index": 497, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d6ce543-f53f-4850-af81-91a1ccd7559b", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4a497a6-64f5-41b1-9ef8-a973139dfdaba", "record_id": "flaws_cloudtrail:0000498:f4a497a6-64f5-41b1-9ef8-a973139dfdaba", "row_index": 498, "timestamp": "2018-12-19T23:41:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4a497a6-64f5-41b1-9ef8-a973139dfdaba", "eventTime": "2018-12-19T23:41:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7b9336-b0aa-4083-a0d2-7999e88fb233", "record_id": "flaws_cloudtrail:0000499:ba7b9336-b0aa-4083-a0d2-7999e88fb233", "row_index": 499, "timestamp": "2018-12-19T23:41:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7b9336-b0aa-4083-a0d2-7999e88fb233", "eventTime": "2018-12-19T23:41:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b335a3-76a7-45e9-9446-a4e91e69ec5d", "record_id": "flaws_cloudtrail:0000500:d7b335a3-76a7-45e9-9446-a4e91e69ec5d", "row_index": 500, "timestamp": "2018-12-19T23:41:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b335a3-76a7-45e9-9446-a4e91e69ec5d", "eventTime": "2018-12-19T23:41:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edb8b926-a1d4-42a0-8960-dbd798bd7bc4", "record_id": "flaws_cloudtrail:0000501:edb8b926-a1d4-42a0-8960-dbd798bd7bc4", "row_index": 501, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edb8b926-a1d4-42a0-8960-dbd798bd7bc4", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90eb89ad-4fad-4126-a21a-4fd2ea025f9c", "record_id": "flaws_cloudtrail:0000502:90eb89ad-4fad-4126-a21a-4fd2ea025f9c", "row_index": 502, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90eb89ad-4fad-4126-a21a-4fd2ea025f9c", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d9f869c-2a17-40b6-a66f-be7d900a957d", "record_id": "flaws_cloudtrail:0000503:4d9f869c-2a17-40b6-a66f-be7d900a957d", "row_index": 503, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d9f869c-2a17-40b6-a66f-be7d900a957d", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15a7621-0a72-49b2-8f2d-1336f4359dbe", "record_id": "flaws_cloudtrail:0000504:a15a7621-0a72-49b2-8f2d-1336f4359dbe", "row_index": 504, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15a7621-0a72-49b2-8f2d-1336f4359dbe", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034896b9-1272-455d-84a7-73bb244534a7", "record_id": "flaws_cloudtrail:0000505:034896b9-1272-455d-84a7-73bb244534a7", "row_index": 505, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034896b9-1272-455d-84a7-73bb244534a7", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039207-b013-4e4a-a572-d50c59342e", "record_id": "flaws_cloudtrail:0000506:039207-b013-4e4a-a572-d50c59342e", "row_index": 506, "timestamp": "2018-12-19T23:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039207-b013-4e4a-a572-d50c59342e", "eventTime": "2018-12-19T23:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e02df06a-2a48-4665-a131-333fe1a993831", "record_id": "flaws_cloudtrail:0000507:e02df06a-2a48-4665-a131-333fe1a993831", "row_index": 507, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e02df06a-2a48-4665-a131-333fe1a993831", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2775f5d-7fd0-4ca4-877a-799cc2c75107", "record_id": "flaws_cloudtrail:0000508:f2775f5d-7fd0-4ca4-877a-799cc2c75107", "row_index": 508, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2775f5d-7fd0-4ca4-877a-799cc2c75107", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7560dec-6b69-49e8-b393-010d916e34f2", "record_id": "flaws_cloudtrail:0000509:d7560dec-6b69-49e8-b393-010d916e34f2", "row_index": 509, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7560dec-6b69-49e8-b393-010d916e34f2", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb4b5d3-6fe5-4d1b-9133-8e406984fcc", "record_id": "flaws_cloudtrail:0000510:ceb4b5d3-6fe5-4d1b-9133-8e406984fcc", "row_index": 510, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb4b5d3-6fe5-4d1b-9133-8e406984fcc", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b24b5463-b284-44ee-95b9-7e656680bd4f", "record_id": "flaws_cloudtrail:0000511:b24b5463-b284-44ee-95b9-7e656680bd4f", "row_index": 511, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b24b5463-b284-44ee-95b9-7e656680bd4f", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe52b62d-e262-4d51-bcab-ffda80ad95a4", "record_id": "flaws_cloudtrail:0000512:fe52b62d-e262-4d51-bcab-ffda80ad95a4", "row_index": 512, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe52b62d-e262-4d51-bcab-ffda80ad95a4", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f2dada1-b796-403f-9460-6e2bab9c1e6f", "record_id": "flaws_cloudtrail:0000513:1f2dada1-b796-403f-9460-6e2bab9c1e6f", "row_index": 513, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f2dada1-b796-403f-9460-6e2bab9c1e6f", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f285c1cd-14c6-4b3c-b67d-5b9b3dfc9aad", "record_id": "flaws_cloudtrail:0000514:f285c1cd-14c6-4b3c-b67d-5b9b3dfc9aad", "row_index": 514, "timestamp": "2018-12-19T23:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f285c1cd-14c6-4b3c-b67d-5b9b3dfc9aad", "eventTime": "2018-12-19T23:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52927c-df6c-485b-9482-0b488c059379", "record_id": "flaws_cloudtrail:0000515:a52927c-df6c-485b-9482-0b488c059379", "row_index": 515, "timestamp": "2018-12-19T23:41:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52927c-df6c-485b-9482-0b488c059379", "eventTime": "2018-12-19T23:41:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b40392e4-4a66-4c5a-af93-0420b23d5e3f", "record_id": "flaws_cloudtrail:0000516:b40392e4-4a66-4c5a-af93-0420b23d5e3f", "row_index": 516, "timestamp": "2018-12-19T23:41:32Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b40392e4-4a66-4c5a-af93-0420b23d5e3f", "eventTime": "2018-12-19T23:41:32Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617bc232-e25d-4beb-a053-9bfd199df31d", "record_id": "flaws_cloudtrail:0000517:617bc232-e25d-4beb-a053-9bfd199df31d", "row_index": 517, "timestamp": "2018-12-19T23:41:32Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617bc232-e25d-4beb-a053-9bfd199df31d", "eventTime": "2018-12-19T23:41:32Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca1cfa00-86ec-4ec2-8ce1-96b7d8a8e350", "record_id": "flaws_cloudtrail:0000518:ca1cfa00-86ec-4ec2-8ce1-96b7d8a8e350", "row_index": 518, "timestamp": "2018-12-19T23:41:32Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca1cfa00-86ec-4ec2-8ce1-96b7d8a8e350", "eventTime": "2018-12-19T23:41:32Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b445a3d-c042-4c60-b043-420dd674711ea", "record_id": "flaws_cloudtrail:0000519:3b445a3d-c042-4c60-b043-420dd674711ea", "row_index": 519, "timestamp": "2018-12-19T23:41:32Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b445a3d-c042-4c60-b043-420dd674711ea", "eventTime": "2018-12-19T23:41:32Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b894414-7502-49df-beb2-9b41f13bf57b", "record_id": "flaws_cloudtrail:0000520:a5b894414-7502-49df-beb2-9b41f13bf57b", "row_index": 520, "timestamp": "2018-12-19T23:41:32Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b894414-7502-49df-beb2-9b41f13bf57b", "eventTime": "2018-12-19T23:41:32Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dd21ae0-10f9-41be-879d-268970c3e94c", "record_id": "flaws_cloudtrail:0000521:2dd21ae0-10f9-41be-879d-268970c3e94c", "row_index": 521, "timestamp": "2018-12-19T23:41:33Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dd21ae0-10f9-41be-879d-268970c3e94c", "eventTime": "2018-12-19T23:41:33Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab4af60f-fdd0-4ae5-840d-7aac3d072163", "record_id": "flaws_cloudtrail:0000522:ab4af60f-fdd0-4ae5-840d-7aac3d072163", "row_index": 522, "timestamp": "2018-12-19T23:41:33Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab4af60f-fdd0-4ae5-840d-7aac3d072163", "eventTime": "2018-12-19T23:41:33Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d156c685-5648-42ba-bbde-3e70b022de88", "record_id": "flaws_cloudtrail:0000523:d156c685-5648-42ba-bbde-3e70b022de88", "row_index": 523, "timestamp": "2018-12-19T23:41:33Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d156c685-5648-42ba-bbde-3e70b022de88", "eventTime": "2018-12-19T23:41:33Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f74ddfd-9303-4d0f-8993-345f0cf31283", "record_id": "flaws_cloudtrail:0000524:6f74ddfd-9303-4d0f-8993-345f0cf31283", "row_index": 524, "timestamp": "2018-12-19T23:41:35Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f74ddfd-9303-4d0f-8993-345f0cf31283", "eventTime": "2018-12-19T23:41:35Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6167bbdb-cec3-4162-8c5d-0f7b4485197c", "record_id": "flaws_cloudtrail:0000525:6167bbdb-cec3-4162-8c5d-0f7b4485197c", "row_index": 525, "timestamp": "2018-12-19T23:41:35Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6167bbdb-cec3-4162-8c5d-0f7b4485197c", "eventTime": "2018-12-19T23:41:35Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec8d334e-184e-452d-a047-b680006fa5eca", "record_id": "flaws_cloudtrail:0000526:ec8d334e-184e-452d-a047-b680006fa5eca", "row_index": 526, "timestamp": "2018-12-19T23:41:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec8d334e-184e-452d-a047-b680006fa5eca", "eventTime": "2018-12-19T23:41:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a545003-3ca2-42a6-8161-b00e0444a7ab", "record_id": "flaws_cloudtrail:0000527:2a545003-3ca2-42a6-8161-b00e0444a7ab", "row_index": 527, "timestamp": "2018-12-19T23:41:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a545003-3ca2-42a6-8161-b00e0444a7ab", "eventTime": "2018-12-19T23:41:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd9dd89-edaa-4335-b305-e52e3e19a187", "record_id": "flaws_cloudtrail:0000528:9dd9dd89-edaa-4335-b305-e52e3e19a187", "row_index": 528, "timestamp": "2018-12-19T23:41:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd9dd89-edaa-4335-b305-e52e3e19a187", "eventTime": "2018-12-19T23:41:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efa86927-c3b5-48c3-8f1a-48d1610cf932", "record_id": "flaws_cloudtrail:0000529:efa86927-c3b5-48c3-8f1a-48d1610cf932", "row_index": 529, "timestamp": "2018-12-19T23:41:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efa86927-c3b5-48c3-8f1a-48d1610cf932", "eventTime": "2018-12-19T23:41:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e37f5ba7-cebf-477c-b5a4-4f60824ab3", "record_id": "flaws_cloudtrail:0000530:e37f5ba7-cebf-477c-b5a4-4f60824ab3", "row_index": 530, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e37f5ba7-cebf-477c-b5a4-4f60824ab3", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e26d6249-b11a-4dce-82a5-356787ce7f8d0", "record_id": "flaws_cloudtrail:0000531:e26d6249-b11a-4dce-82a5-356787ce7f8d0", "row_index": 531, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e26d6249-b11a-4dce-82a5-356787ce7f8d0", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18cf3404-6787-49be-98a8-64d63815", "record_id": "flaws_cloudtrail:0000532:18cf3404-6787-49be-98a8-64d63815", "row_index": 532, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18cf3404-6787-49be-98a8-64d63815", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68abbeb9-9ca0-4aff-9dcd-8bb6f325d627", "record_id": "flaws_cloudtrail:0000533:68abbeb9-9ca0-4aff-9dcd-8bb6f325d627", "row_index": 533, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68abbeb9-9ca0-4aff-9dcd-8bb6f325d627", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d100004-120e-4924-bf41-06223a643798", "record_id": "flaws_cloudtrail:0000534:d100004-120e-4924-bf41-06223a643798", "row_index": 534, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d100004-120e-4924-bf41-06223a643798", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6c46d01-1271-41f6-9c76-9e170bebe5ca", "record_id": "flaws_cloudtrail:0000535:b6c46d01-1271-41f6-9c76-9e170bebe5ca", "row_index": 535, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6c46d01-1271-41f6-9c76-9e170bebe5ca", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "961f9127-1030-4ac6-a2fd-f7708940235e", "record_id": "flaws_cloudtrail:0000536:961f9127-1030-4ac6-a2fd-f7708940235e", "row_index": 536, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "961f9127-1030-4ac6-a2fd-f7708940235e", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d650315-7fca-430d-8445-cb57d9ca04bf", "record_id": "flaws_cloudtrail:0000537:d650315-7fca-430d-8445-cb57d9ca04bf", "row_index": 537, "timestamp": "2018-12-19T23:41:37Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d650315-7fca-430d-8445-cb57d9ca04bf", "eventTime": "2018-12-19T23:41:37Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ab7f45f-1f1f-43cb-9a80-e6147b7116e8", "record_id": "flaws_cloudtrail:0000538:3ab7f45f-1f1f-43cb-9a80-e6147b7116e8", "row_index": 538, "timestamp": "2018-12-19T23:41:38Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ab7f45f-1f1f-43cb-9a80-e6147b7116e8", "eventTime": "2018-12-19T23:41:38Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeSSLPolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "909096af-1678-4c89-827b-d4db4bbf518a", "record_id": "flaws_cloudtrail:0000539:909096af-1678-4c89-827b-d4db4bbf518a", "row_index": 539, "timestamp": "2018-12-19T23:41:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "909096af-1678-4c89-827b-d4db4bbf518a", "eventTime": "2018-12-19T23:41:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fac8b922-b567-410c-8dfe-7216f8e2c795", "record_id": "flaws_cloudtrail:0000540:fac8b922-b567-410c-8dfe-7216f8e2c795", "row_index": 540, "timestamp": "2018-12-19T23:41:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fac8b922-b567-410c-8dfe-7216f8e2c795", "eventTime": "2018-12-19T23:41:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20dde55c-3f0a-4e88-b741-458eeefa4d3f", "record_id": "flaws_cloudtrail:0000541:20dde55c-3f0a-4e88-b741-458eeefa4d3f", "row_index": 541, "timestamp": "2018-12-19T23:41:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20dde55c-3f0a-4e88-b741-458eeefa4d3f", "eventTime": "2018-12-19T23:41:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06ea8a9-3b80-416c-9776-2d772f040348d", "record_id": "flaws_cloudtrail:0000542:a06ea8a9-3b80-416c-9776-2d772f040348d", "row_index": 542, "timestamp": "2018-12-19T23:41:39Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06ea8a9-3b80-416c-9776-2d772f040348d", "eventTime": "2018-12-19T23:41:39Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa64e5a4-b5be-4f8a-b3bf-9a40a9b87839", "record_id": "flaws_cloudtrail:0000543:fa64e5a4-b5be-4f8a-b3bf-9a40a9b87839", "row_index": 543, "timestamp": "2018-12-19T23:41:39Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa64e5a4-b5be-4f8a-b3bf-9a40a9b87839", "eventTime": "2018-12-19T23:41:39Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b950e3-426f-4f14-9ba9-c9d133709babc", "record_id": "flaws_cloudtrail:0000544:a5b950e3-426f-4f14-9ba9-c9d133709babc", "row_index": 544, "timestamp": "2018-12-19T23:41:39Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b950e3-426f-4f14-9ba9-c9d133709babc", "eventTime": "2018-12-19T23:41:39Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baa35e9c-7793-47d1-b997-f1c65e54c181", "record_id": "flaws_cloudtrail:0000545:baa35e9c-7793-47d1-b997-f1c65e54c181", "row_index": 545, "timestamp": "2018-12-19T23:41:39Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baa35e9c-7793-47d1-b997-f1c65e54c181", "eventTime": "2018-12-19T23:41:39Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952375-e4f9-4225-a9b2-07c44f80c465", "record_id": "flaws_cloudtrail:0000546:952375-e4f9-4225-a9b2-07c44f80c465", "row_index": 546, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952375-e4f9-4225-a9b2-07c44f80c465", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3daed2cf-2ec8-462e-b463-cdcc79864cc8", "record_id": "flaws_cloudtrail:0000547:3daed2cf-2ec8-462e-b463-cdcc79864cc8", "row_index": 547, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3daed2cf-2ec8-462e-b463-cdcc79864cc8", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "027870a1-6fc8-4a4f-becc-1da083ee59ec", "record_id": "flaws_cloudtrail:0000548:027870a1-6fc8-4a4f-becc-1da083ee59ec", "row_index": 548, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "027870a1-6fc8-4a4f-becc-1da083ee59ec", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b47daf2f-ea28-4dce-b7d5-5989ef986e92", "record_id": "flaws_cloudtrail:0000549:b47daf2f-ea28-4dce-b7d5-5989ef986e92", "row_index": 549, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b47daf2f-ea28-4dce-b7d5-5989ef986e92", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "634ccfdd-837f-4777-ae53-e524dfefca1e", "record_id": "flaws_cloudtrail:0000550:634ccfdd-837f-4777-ae53-e524dfefca1e", "row_index": 550, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "634ccfdd-837f-4777-ae53-e524dfefca1e", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0ef5c5-c427-43be-b2b9-e52b78b699074", "record_id": "flaws_cloudtrail:0000551:3d0ef5c5-c427-43be-b2b9-e52b78b699074", "row_index": 551, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0ef5c5-c427-43be-b2b9-e52b78b699074", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8299d1c2-60bc-404a-835a-85c5a2b35ccd", "record_id": "flaws_cloudtrail:0000552:8299d1c2-60bc-404a-835a-85c5a2b35ccd", "row_index": 552, "timestamp": "2018-12-19T23:41:40Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8299d1c2-60bc-404a-835a-85c5a2b35ccd", "eventTime": "2018-12-19T23:41:40Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898fcda2-1a84-411c-a885-105b8ad81e98", "record_id": "flaws_cloudtrail:0000553:898fcda2-1a84-411c-a885-105b8ad81e98", "row_index": 553, "timestamp": "2018-12-19T23:41:41Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898fcda2-1a84-411c-a885-105b8ad81e98", "eventTime": "2018-12-19T23:41:41Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72eeb4f3-6e36-436a-8163-f073ab998428d", "record_id": "flaws_cloudtrail:0000554:72eeb4f3-6e36-436a-8163-f073ab998428d", "row_index": 554, "timestamp": "2018-12-19T23:41:41Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72eeb4f3-6e36-436a-8163-f073ab998428d", "eventTime": "2018-12-19T23:41:41Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e255dc65-91b0-47c1-b983-a61bd75dd49b", "record_id": "flaws_cloudtrail:0000555:e255dc65-91b0-47c1-b983-a61bd75dd49b", "row_index": 555, "timestamp": "2018-12-19T23:41:41Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e255dc65-91b0-47c1-b983-a61bd75dd49b", "eventTime": "2018-12-19T23:41:41Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "161f1327-b3f3-4aa4-984a-3a11453aa617", "record_id": "flaws_cloudtrail:0000556:161f1327-b3f3-4aa4-984a-3a11453aa617", "row_index": 556, "timestamp": "2018-12-19T23:41:41Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "161f1327-b3f3-4aa4-984a-3a11453aa617", "eventTime": "2018-12-19T23:41:41Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2318f07-007f-4c6c-aa58-496fd2c497a5", "record_id": "flaws_cloudtrail:0000557:e2318f07-007f-4c6c-aa58-496fd2c497a5", "row_index": 557, "timestamp": "2018-12-19T23:41:42Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2318f07-007f-4c6c-aa58-496fd2c497a5", "eventTime": "2018-12-19T23:41:42Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132458d-a7e6-4292-af25-b6b97ec66272", "record_id": "flaws_cloudtrail:0000558:132458d-a7e6-4292-af25-b6b97ec66272", "row_index": 558, "timestamp": "2018-12-19T23:41:42Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132458d-a7e6-4292-af25-b6b97ec66272", "eventTime": "2018-12-19T23:41:42Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab632b6-08f7-4b3c-af26-92a95730f28d", "record_id": "flaws_cloudtrail:0000559:0ab632b6-08f7-4b3c-af26-92a95730f28d", "row_index": 559, "timestamp": "2018-12-19T23:41:42Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab632b6-08f7-4b3c-af26-92a95730f28d", "eventTime": "2018-12-19T23:41:42Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e963d24d-463a-4b07-be85-c35280a1ea", "record_id": "flaws_cloudtrail:0000560:e963d24d-463a-4b07-be85-c35280a1ea", "row_index": 560, "timestamp": "2018-12-19T23:41:42Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e963d24d-463a-4b07-be85-c35280a1ea", "eventTime": "2018-12-19T23:41:42Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643cc2af-a5fe-4e92-b231-c979383f45a27", "record_id": "flaws_cloudtrail:0000561:643cc2af-a5fe-4e92-b231-c979383f45a27", "row_index": 561, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643cc2af-a5fe-4e92-b231-c979383f45a27", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25684fd-307f-4037-bddc-cc45aa67021d", "record_id": "flaws_cloudtrail:0000562:f25684fd-307f-4037-bddc-cc45aa67021d", "row_index": 562, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25684fd-307f-4037-bddc-cc45aa67021d", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c201679-5c5a-412e-a5ee-b3d0ac9adb9f", "record_id": "flaws_cloudtrail:0000563:5c201679-5c5a-412e-a5ee-b3d0ac9adb9f", "row_index": 563, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c201679-5c5a-412e-a5ee-b3d0ac9adb9f", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9bdbc9f-9312-410b-88a8-f26b6d2e7a59", "record_id": "flaws_cloudtrail:0000564:a9bdbc9f-9312-410b-88a8-f26b6d2e7a59", "row_index": 564, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9bdbc9f-9312-410b-88a8-f26b6d2e7a59", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f6f136-7153-4b2b-98ea-0d20ba469791", "record_id": "flaws_cloudtrail:0000565:53f6f136-7153-4b2b-98ea-0d20ba469791", "row_index": 565, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f6f136-7153-4b2b-98ea-0d20ba469791", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d44643c-26d8-4ba6-8913-fbc975aad77b", "record_id": "flaws_cloudtrail:0000566:4d44643c-26d8-4ba6-8913-fbc975aad77b", "row_index": 566, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d44643c-26d8-4ba6-8913-fbc975aad77b", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa102365a-1877-483b-b53c-efc296559cb0", "record_id": "flaws_cloudtrail:0000567:aa102365a-1877-483b-b53c-efc296559cb0", "row_index": 567, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa102365a-1877-483b-b53c-efc296559cb0", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41b4341-5f6f-4abf-96ef-48986513dba1", "record_id": "flaws_cloudtrail:0000568:f41b4341-5f6f-4abf-96ef-48986513dba1", "row_index": 568, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41b4341-5f6f-4abf-96ef-48986513dba1", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c0a3058-f9fb-4b26-a6fd-1abe2b616fa8", "record_id": "flaws_cloudtrail:0000569:5c0a3058-f9fb-4b26-a6fd-1abe2b616fa8", "row_index": 569, "timestamp": "2018-12-19T23:41:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c0a3058-f9fb-4b26-a6fd-1abe2b616fa8", "eventTime": "2018-12-19T23:41:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43b9ebc3-5a61-478f-8416-a9e9cc2d9064", "record_id": "flaws_cloudtrail:0000570:43b9ebc3-5a61-478f-8416-a9e9cc2d9064", "row_index": 570, "timestamp": "2018-12-19T23:41:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43b9ebc3-5a61-478f-8416-a9e9cc2d9064", "eventTime": "2018-12-19T23:41:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799f94cc-be14-4b5b-93ec-646302f9fdbc", "record_id": "flaws_cloudtrail:0000571:799f94cc-be14-4b5b-93ec-646302f9fdbc", "row_index": 571, "timestamp": "2018-12-19T23:41:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799f94cc-be14-4b5b-93ec-646302f9fdbc", "eventTime": "2018-12-19T23:41:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d53e2ee7-fdf5-441b-88fa-5334357f1f9b", "record_id": "flaws_cloudtrail:0000572:d53e2ee7-fdf5-441b-88fa-5334357f1f9b", "row_index": 572, "timestamp": "2018-12-19T23:41:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 642, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d53e2ee7-fdf5-441b-88fa-5334357f1f9b", "eventTime": "2018-12-19T23:41:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f9d863-f069-4f66-a9a2-43f3507f89a6", "record_id": "flaws_cloudtrail:0000573:c1f9d863-f069-4f66-a9a2-43f3507f89a6", "row_index": 573, "timestamp": "2018-12-19T23:41:51Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f9d863-f069-4f66-a9a2-43f3507f89a6", "eventTime": "2018-12-19T23:41:51Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15c60834-690a-49ba-b73b-a546e6e0f480", "record_id": "flaws_cloudtrail:0000574:15c60834-690a-49ba-b73b-a546e6e0f480", "row_index": 574, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15c60834-690a-49ba-b73b-a546e6e0f480", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8350f4ad-57c6-470e-95b6-07517ff59c", "record_id": "flaws_cloudtrail:0000575:8350f4ad-57c6-470e-95b6-07517ff59c", "row_index": 575, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8350f4ad-57c6-470e-95b6-07517ff59c", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2879db3-1164-49bb-a0db-3ce3a0d8540b", "record_id": "flaws_cloudtrail:0000576:b2879db3-1164-49bb-a0db-3ce3a0d8540b", "row_index": 576, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2879db3-1164-49bb-a0db-3ce3a0d8540b", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba0246d3-9bdf-4f53-8a84-2ead199743a", "record_id": "flaws_cloudtrail:0000577:ba0246d3-9bdf-4f53-8a84-2ead199743a", "row_index": 577, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba0246d3-9bdf-4f53-8a84-2ead199743a", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c438812-480e-4953-9858-deccda79d882", "record_id": "flaws_cloudtrail:0000578:7c438812-480e-4953-9858-deccda79d882", "row_index": 578, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c438812-480e-4953-9858-deccda79d882", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf1c19d4-d8ae-42a6-86b9-e2071e1080b0", "record_id": "flaws_cloudtrail:0000579:bf1c19d4-d8ae-42a6-86b9-e2071e1080b0", "row_index": 579, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf1c19d4-d8ae-42a6-86b9-e2071e1080b0", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a92d7b-dd05-4200-8827-102535c5d0", "record_id": "flaws_cloudtrail:0000580:26a92d7b-dd05-4200-8827-102535c5d0", "row_index": 580, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a92d7b-dd05-4200-8827-102535c5d0", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "897d5e1d-4290-4921-ad69-ed836a1cd602", "record_id": "flaws_cloudtrail:0000581:897d5e1d-4290-4921-ad69-ed836a1cd602", "row_index": 581, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "897d5e1d-4290-4921-ad69-ed836a1cd602", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29608a40-cba7-4ce2-8238-cb7ab9aac1a5", "record_id": "flaws_cloudtrail:0000582:29608a40-cba7-4ce2-8238-cb7ab9aac1a5", "row_index": 582, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29608a40-cba7-4ce2-8238-cb7ab9aac1a5", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0c3b67f-19b0-43ad-b2ba-68caedc0ab78", "record_id": "flaws_cloudtrail:0000583:f0c3b67f-19b0-43ad-b2ba-68caedc0ab78", "row_index": 583, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0c3b67f-19b0-43ad-b2ba-68caedc0ab78", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a20259-8d1a-444a-9eb2-5d96cdcd9e43", "record_id": "flaws_cloudtrail:0000584:a20259-8d1a-444a-9eb2-5d96cdcd9e43", "row_index": 584, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a20259-8d1a-444a-9eb2-5d96cdcd9e43", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d939141a-e00e-4cf1-b175-43e03f62b6c7", "record_id": "flaws_cloudtrail:0000585:d939141a-e00e-4cf1-b175-43e03f62b6c7", "row_index": 585, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d939141a-e00e-4cf1-b175-43e03f62b6c7", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dee7739-9aaa-40c0-a70a-933ae140b9dd", "record_id": "flaws_cloudtrail:0000586:8dee7739-9aaa-40c0-a70a-933ae140b9dd", "row_index": 586, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dee7739-9aaa-40c0-a70a-933ae140b9dd", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1395bd8e-665b-4d50-b5d4-dbe42a9d081a", "record_id": "flaws_cloudtrail:0000587:1395bd8e-665b-4d50-b5d4-dbe42a9d081a", "row_index": 587, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1395bd8e-665b-4d50-b5d4-dbe42a9d081a", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23fe17dd-98f7-481f-ad6c-fb0f7f035856", "record_id": "flaws_cloudtrail:0000588:23fe17dd-98f7-481f-ad6c-fb0f7f035856", "row_index": 588, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23fe17dd-98f7-481f-ad6c-fb0f7f035856", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78d882d0-0796-4388-847c-66a534ff45f6", "record_id": "flaws_cloudtrail:0000589:78d882d0-0796-4388-847c-66a534ff45f6", "row_index": 589, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78d882d0-0796-4388-847c-66a534ff45f6", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b82cdeb-f58d-4b2c-804b-b3df56ad0011", "record_id": "flaws_cloudtrail:0000590:4b82cdeb-f58d-4b2c-804b-b3df56ad0011", "row_index": 590, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b82cdeb-f58d-4b2c-804b-b3df56ad0011", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d3ae0b-874a-49ed-a8f9-8a17d76b7e1e", "record_id": "flaws_cloudtrail:0000591:c4d3ae0b-874a-49ed-a8f9-8a17d76b7e1e", "row_index": 591, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d3ae0b-874a-49ed-a8f9-8a17d76b7e1e", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b713921c-d730-4e80-b0f8-a902a94d0b33", "record_id": "flaws_cloudtrail:0000592:b713921c-d730-4e80-b0f8-a902a94d0b33", "row_index": 592, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b713921c-d730-4e80-b0f8-a902a94d0b33", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5351c763-3989-4860-9dfc-a614688acb0f", "record_id": "flaws_cloudtrail:0000593:5351c763-3989-4860-9dfc-a614688acb0f", "row_index": 593, "timestamp": "2018-12-19T23:41:52Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5351c763-3989-4860-9dfc-a614688acb0f", "eventTime": "2018-12-19T23:41:52Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2640ba5b-3359-41ca-be4b-b67be0db7235", "record_id": "flaws_cloudtrail:0000594:2640ba5b-3359-41ca-be4b-b67be0db7235", "row_index": 594, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2640ba5b-3359-41ca-be4b-b67be0db7235", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e581279f2-24d7-4c42-8a8b-30a830ec263b", "record_id": "flaws_cloudtrail:0000595:e581279f2-24d7-4c42-8a8b-30a830ec263b", "row_index": 595, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e581279f2-24d7-4c42-8a8b-30a830ec263b", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160358-88f3-470e-a788-df306302d", "record_id": "flaws_cloudtrail:0000596:160358-88f3-470e-a788-df306302d", "row_index": 596, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160358-88f3-470e-a788-df306302d", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa93686-de57-43c8-90e8-aa9f7c1857c7", "record_id": "flaws_cloudtrail:0000597:cfa93686-de57-43c8-90e8-aa9f7c1857c7", "row_index": 597, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa93686-de57-43c8-90e8-aa9f7c1857c7", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2021c1b0-70a7-4e3b-ab4c-588da9b25ab4", "record_id": "flaws_cloudtrail:0000598:2021c1b0-70a7-4e3b-ab4c-588da9b25ab4", "row_index": 598, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2021c1b0-70a7-4e3b-ab4c-588da9b25ab4", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79638c2-8b9b-4ae3-bc8f-c5391a2e395a", "record_id": "flaws_cloudtrail:0000599:79638c2-8b9b-4ae3-bc8f-c5391a2e395a", "row_index": 599, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79638c2-8b9b-4ae3-bc8f-c5391a2e395a", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ce3f308-364e-4c66-95c3-53c741afcf0f", "record_id": "flaws_cloudtrail:0000600:5ce3f308-364e-4c66-95c3-53c741afcf0f", "row_index": 600, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ce3f308-364e-4c66-95c3-53c741afcf0f", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33b5bc6-4e9a-4a44-93d6-2e0387cdf62e", "record_id": "flaws_cloudtrail:0000601:e33b5bc6-4e9a-4a44-93d6-2e0387cdf62e", "row_index": 601, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33b5bc6-4e9a-4a44-93d6-2e0387cdf62e", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266dd7a0-7fef-42f8-a9ab-5ee1cbc3f54d", "record_id": "flaws_cloudtrail:0000602:266dd7a0-7fef-42f8-a9ab-5ee1cbc3f54d", "row_index": 602, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266dd7a0-7fef-42f8-a9ab-5ee1cbc3f54d", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cfccd54-225d-4948-b797-ebf095f8515c", "record_id": "flaws_cloudtrail:0000603:5cfccd54-225d-4948-b797-ebf095f8515c", "row_index": 603, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cfccd54-225d-4948-b797-ebf095f8515c", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca77b748-8b32-413a-a833-ca2f83a1dc8f", "record_id": "flaws_cloudtrail:0000604:ca77b748-8b32-413a-a833-ca2f83a1dc8f", "row_index": 604, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca77b748-8b32-413a-a833-ca2f83a1dc8f", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c7d0669-2700-4777-a7a4-a692e0d1024c", "record_id": "flaws_cloudtrail:0000605:7c7d0669-2700-4777-a7a4-a692e0d1024c", "row_index": 605, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c7d0669-2700-4777-a7a4-a692e0d1024c", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28163-c886-4149-8d6a-1adb5ac7bf2a", "record_id": "flaws_cloudtrail:0000606:28163-c886-4149-8d6a-1adb5ac7bf2a", "row_index": 606, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28163-c886-4149-8d6a-1adb5ac7bf2a", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bfe475d-3525-4de5-87a4-f9ab8dcfb283", "record_id": "flaws_cloudtrail:0000607:6bfe475d-3525-4de5-87a4-f9ab8dcfb283", "row_index": 607, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bfe475d-3525-4de5-87a4-f9ab8dcfb283", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b558a011-fc50-4c62-84b3-3055eadba1dc", "record_id": "flaws_cloudtrail:0000608:b558a011-fc50-4c62-84b3-3055eadba1dc", "row_index": 608, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b558a011-fc50-4c62-84b3-3055eadba1dc", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee25cef-7e78-4976-985f-9831f0e4e82e", "record_id": "flaws_cloudtrail:0000609:bee25cef-7e78-4976-985f-9831f0e4e82e", "row_index": 609, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee25cef-7e78-4976-985f-9831f0e4e82e", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d02af293-8a9a-456c-8773-c2c28a47a395", "record_id": "flaws_cloudtrail:0000610:d02af293-8a9a-456c-8773-c2c28a47a395", "row_index": 610, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d02af293-8a9a-456c-8773-c2c28a47a395", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c9b33a-640d-4d79-8fa4-7c404dfc4284", "record_id": "flaws_cloudtrail:0000611:e6c9b33a-640d-4d79-8fa4-7c404dfc4284", "row_index": 611, "timestamp": "2018-12-19T23:41:53Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "219.39.252.244", "user_agent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c9b33a-640d-4d79-8fa4-7c404dfc4284", "eventTime": "2018-12-19T23:41:53Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "219.39.252.244", "userAgent": "[Boto3/1.9.33 Python/2.7.15 Darwin/18.2.0 Botocore/1.12.33]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}