Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266939e9a-d7ad-4163-9331-1e9b8f17071", "record_id": "flaws_cloudtrail:0000000:266939e9a-d7ad-4163-9331-1e9b8f17071", "row_index": 0, "timestamp": "2019-07-22T04:18:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266939e9a-d7ad-4163-9331-1e9b8f17071", "eventTime": "2019-07-22T04:18:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538b47d5-3e93-41a6-827d-ffa6379a85bd", "record_id": "flaws_cloudtrail:0000001:538b47d5-3e93-41a6-827d-ffa6379a85bd", "row_index": 1, "timestamp": "2019-07-22T04:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538b47d5-3e93-41a6-827d-ffa6379a85bd", "eventTime": "2019-07-22T04:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9837B61LZK62BI5T", "expiration": "Jul 22, 2019 10:41:28 AM", "sessionToken": "AgoJb3JpZ2luX2VjEE0aCXVzLXdlc3QtMiJHMEUCIHXGb+BL9trfCroc+Vc0hcUQz0ec5gCJNmDJRPuF1lgtAiEAxNJeME2TtMz0SZT7hydWysbFNDF2xeHneq6oUoKgwRwq4wMItv//////////ARAAGgw5NzU0MjYyNjIwMjkiDKka38vZNuAyQt88kCq3A/sDVSNj6/LVGwjVze85yMC4zifz4iG51XTcdpM870Jc16IABjtfbGhdM880IJLf0ZhAyhUQ+eXYCdoyQX2nsfaeWWFkDt9J9n97hi+2TyoJVtciANZYpHbVu7TpR9MIGxNd+FBLqHZe8nb6uzOKxVo5RARF6MCPABjVmu9UCfxit1HjCLO1ImbATLJo2Y27QRzx0VqxtCACfIkyMUV8MsYJpx1IGhNO5vG4KhhvgKT4AFuL7lYGoV+B0z/FnABrZrb0H4WFSeL+ruqFDa3dGH1vtK39wFyAEpHELgRs/0MLQhGqApZmRVdu39TshlnmB2KehLg/3tLb+HWgeDFseGGb6oPlPwsjfV5MPhEPKbFa+w+yAsglzox9voGXTnRyv06WRpTG3ygFersd2K7S0APZQzgmJ34cYMO6VmCIQc3Kxh2eqLb4X4t/1T3MgbcSTtZbYyZY75vf+J4v+cUuUwIQr//qWWFRLNKq/kZp9VfJomw9NDXZh99wUsZMNP98RFcbqhkt6ANzdrq9HhAUgXohRBMAaTI5hpbjoEmPjrC8EbVviTaQcH6QWK6Foxl6ohPBy9qIzMkwmfjU6QU6tAF52GKMJi2BtZPIz96GOJpHsaBYrDubO6D0uWLiWU3PjLXSp51uw40uiDRfvcUJ5F0skCYUs8tjfqAstJoJsP06OA0x0dTx2n74TQIIgwpeq7ysRgmGeqDOL21CBM/iR2dLUa2wA4AHHi9i6lsYPgAqSkIFWY5MoulULq1Vp/RfBPRAYyyziSLU+VvfSq18ucYE1bUSEjxh894HefOwk5EF/GL+7AQdKiDkrP5IMf11Kold4I8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "538b47d5-3e93-41a6-827d-ffa6379a85bd", "record_id": "flaws_cloudtrail:0000002:538b47d5-3e93-41a6-827d-ffa6379a85bd", "row_index": 2, "timestamp": "2019-07-22T04:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "538b47d5-3e93-41a6-827d-ffa6379a85bd", "eventTime": "2019-07-22T04:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9837B61LZK62BI5T", "expiration": "Jul 22, 2019 10:41:28 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ac4a66-4b96-4852-9c8b-9345037ca9e7", "record_id": "flaws_cloudtrail:0000003:77ac4a66-4b96-4852-9c8b-9345037ca9e7", "row_index": 3, "timestamp": "2019-07-22T05:06:55Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ac4a66-4b96-4852-9c8b-9345037ca9e7", "eventTime": "2019-07-22T05:06:55Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ac4a66-4b96-4852-9c8b-9345037ca9e7", "record_id": "flaws_cloudtrail:0000004:77ac4a66-4b96-4852-9c8b-9345037ca9e7", "row_index": 4, "timestamp": "2019-07-22T05:06:55Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ac4a66-4b96-4852-9c8b-9345037ca9e7", "eventTime": "2019-07-22T05:06:55Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021fba3d-61fa-4398-b763-7d27015a", "record_id": "flaws_cloudtrail:0000005:021fba3d-61fa-4398-b763-7d27015a", "row_index": 5, "timestamp": "2019-07-22T05:07:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021fba3d-61fa-4398-b763-7d27015a", "eventTime": "2019-07-22T05:07:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021fba3d-61fa-4398-b763-7d27015a", "record_id": "flaws_cloudtrail:0000006:021fba3d-61fa-4398-b763-7d27015a", "row_index": 6, "timestamp": "2019-07-22T05:07:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021fba3d-61fa-4398-b763-7d27015a", "eventTime": "2019-07-22T05:07:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ede66fb8-2228-4693-b3fb-3b6def733804", "record_id": "flaws_cloudtrail:0000007:ede66fb8-2228-4693-b3fb-3b6def733804", "row_index": 7, "timestamp": "2019-07-22T05:07:34Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ede66fb8-2228-4693-b3fb-3b6def733804", "eventTime": "2019-07-22T05:07:34Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ede66fb8-2228-4693-b3fb-3b6def733804", "record_id": "flaws_cloudtrail:0000008:ede66fb8-2228-4693-b3fb-3b6def733804", "row_index": 8, "timestamp": "2019-07-22T05:07:34Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ede66fb8-2228-4693-b3fb-3b6def733804", "eventTime": "2019-07-22T05:07:34Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf85ca7-1f2f-4997-b582-0f29027b7576", "record_id": "flaws_cloudtrail:0000009:ddf85ca7-1f2f-4997-b582-0f29027b7576", "row_index": 9, "timestamp": "2019-07-22T05:07:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf85ca7-1f2f-4997-b582-0f29027b7576", "eventTime": "2019-07-22T05:07:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf85ca7-1f2f-4997-b582-0f29027b7576", "record_id": "flaws_cloudtrail:0000010:ddf85ca7-1f2f-4997-b582-0f29027b7576", "row_index": 10, "timestamp": "2019-07-22T05:07:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf85ca7-1f2f-4997-b582-0f29027b7576", "eventTime": "2019-07-22T05:07:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b66b77-b711-48e6-8ffa-69d68a227860", "record_id": "flaws_cloudtrail:0000011:b0b66b77-b711-48e6-8ffa-69d68a227860", "row_index": 11, "timestamp": "2019-07-22T05:08:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b66b77-b711-48e6-8ffa-69d68a227860", "eventTime": "2019-07-22T05:08:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b66b77-b711-48e6-8ffa-69d68a227860", "record_id": "flaws_cloudtrail:0000012:b0b66b77-b711-48e6-8ffa-69d68a227860", "row_index": 12, "timestamp": "2019-07-22T05:08:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b66b77-b711-48e6-8ffa-69d68a227860", "eventTime": "2019-07-22T05:08:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77758c9-c719-40a4-b4f4-17b35bcd01df", "record_id": "flaws_cloudtrail:0000013:77758c9-c719-40a4-b4f4-17b35bcd01df", "row_index": 13, "timestamp": "2019-07-22T05:08:36Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77758c9-c719-40a4-b4f4-17b35bcd01df", "eventTime": "2019-07-22T05:08:36Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77758c9-c719-40a4-b4f4-17b35bcd01df", "record_id": "flaws_cloudtrail:0000014:77758c9-c719-40a4-b4f4-17b35bcd01df", "row_index": 14, "timestamp": "2019-07-22T05:08:36Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77758c9-c719-40a4-b4f4-17b35bcd01df", "eventTime": "2019-07-22T05:08:36Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "record_id": "flaws_cloudtrail:0000015:6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "row_index": 15, "timestamp": "2019-07-22T05:08:58Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "eventTime": "2019-07-22T05:08:58Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "record_id": "flaws_cloudtrail:0000016:6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "row_index": 16, "timestamp": "2019-07-22T05:08:58Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ffbd0d1-36c9-4e6e-a972-1cc388b236687", "eventTime": "2019-07-22T05:08:58Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a84431-2689-4807-be0a-b7cabe1e68d1", "record_id": "flaws_cloudtrail:0000017:8a84431-2689-4807-be0a-b7cabe1e68d1", "row_index": 17, "timestamp": "2019-07-22T05:09:22Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a84431-2689-4807-be0a-b7cabe1e68d1", "eventTime": "2019-07-22T05:09:22Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a84431-2689-4807-be0a-b7cabe1e68d1", "record_id": "flaws_cloudtrail:0000018:8a84431-2689-4807-be0a-b7cabe1e68d1", "row_index": 18, "timestamp": "2019-07-22T05:09:22Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "87.250.9.75", "user_agent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a84431-2689-4807-be0a-b7cabe1e68d1", "eventTime": "2019-07-22T05:09:22Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "87.250.9.75", "userAgent": "aws-cli/1.16.202 Python/3.6.0 Windows/10 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fec33c7-dae4-411c-af30-b2dac2f490d8", "record_id": "flaws_cloudtrail:0000019:5fec33c7-dae4-411c-af30-b2dac2f490d8", "row_index": 19, "timestamp": "2019-07-22T05:10:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1614, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fec33c7-dae4-411c-af30-b2dac2f490d8", "eventTime": "2019-07-22T05:10:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARKSVQD3S0QAWCEFK", "expiration": "Jul 22, 2019 5:10:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d8c431-6624-4957-b9d8-ec0c16345e86", "record_id": "flaws_cloudtrail:0000020:77d8c431-6624-4957-b9d8-ec0c16345e86", "row_index": 20, "timestamp": "2019-07-22T05:10:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1616, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d8c431-6624-4957-b9d8-ec0c16345e86", "eventTime": "2019-07-22T05:10:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKIFZV2Q1WWKPZUPC", "expiration": "Jul 22, 2019 5:10:25 PM", "sessionToken": "AgoJb3JpZ2luX2VjEE0aCXVzLXdlc3QtMiJHMEUCIE4knyRA3rCO1e4xw/zdMCum/9XXppANPlsHArnzjgD/AiEAoRfxIedu+QWEElDMKTweG6xA9cJcTVjuWQpiF9hqe4YqiwIItv//////////ARAAGgw5NzU0MjYyNjIwMjkiDNky25jTXSlXKvnuICrfAQ0DBhsDEWFbjZcsoLzu6YHtXjke30z+H8DBGwshR4061lKrInMjyPP7FDl20/5HtJymaq0Td6GAZXJhSy/fT1m7D/+14GAi9MIOf7RIqu2pDkzYRQ4poqhqk8Va2MO+f/AcVOIqYAI9KIqOaUaPn5qH4YZxLSyyzJEc0QIIuLizOg5KJzyuID9RoXf2WjxSbQfkdfyAMkvwS3x9xw6K1H8Nm2rrSKDVyOnclvgHJODSXrmlO2eXeGNwDmcHfnGrUZKzAhRjizt4SFDW/jB59v0kH+tb33o6m7ERsm227zEwwYrV6QU6tAFyg5DALIJabk5Q3XPAsOZyhBCGfuT0jR4deo8XMrYxEVPn2mYX+Niga3DBbgCSrAkKiZn7jqb6Yo8szecFuBFzVKuQLougUlvlF9/vRRRSHQ9J56pdIHQKGlzxttuvbrxcZSNY69QHS50l26ekn35sDz3BTemwV+L6aMRgtl5/7kSdpbmOI61y/gf4Ms4IbZpT4JymTBhMD2p7chPcfrlgXANC+Z1gJW33hdbvnwPxWj2MDFM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f7b338-f52c-41b7-91e9-99848aaef1be", "record_id": "flaws_cloudtrail:0000021:48f7b338-f52c-41b7-91e9-99848aaef1be", "row_index": 21, "timestamp": "2019-07-22T05:10:25Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARKSVQD3S0QAWCEFK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "254.38.152.152", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f7b338-f52c-41b7-91e9-99848aaef1be", "eventTime": "2019-07-22T05:10:25Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.38.152.152", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARKSVQD3S0QAWCEFK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T05:10:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]fb86e532d32dd82d4138e31e91bfb126", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fec33c7-dae4-411c-af30-b2dac2f490d8", "record_id": "flaws_cloudtrail:0000022:5fec33c7-dae4-411c-af30-b2dac2f490d8", "row_index": 22, "timestamp": "2019-07-22T05:10:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1614, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fec33c7-dae4-411c-af30-b2dac2f490d8", "eventTime": "2019-07-22T05:10:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARKSVQD3S0QAWCEFK", "expiration": "Jul 22, 2019 5:10:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d8c431-6624-4957-b9d8-ec0c16345e86", "record_id": "flaws_cloudtrail:0000023:77d8c431-6624-4957-b9d8-ec0c16345e86", "row_index": 23, "timestamp": "2019-07-22T05:10:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1616, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d8c431-6624-4957-b9d8-ec0c16345e86", "eventTime": "2019-07-22T05:10:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKIFZV2Q1WWKPZUPC", "expiration": "Jul 22, 2019 5:10:25 PM", "sessionToken": "AgoJb3JpZ2luX2VjEE0aCXVzLXdlc3QtMiJHMEUCIE4knyRA3rCO1e4xw/zdMCum/9XXppANPlsHArnzjgD/AiEAoRfxIedu+QWEElDMKTweG6xA9cJcTVjuWQpiF9hqe4YqiwIItv//////////ARAAGgw5NzU0MjYyNjIwMjkiDNky25jTXSlXKvnuICrfAQ0DBhsDEWFbjZcsoLzu6YHtXjke30z+H8DBGwshR4061lKrInMjyPP7FDl20/5HtJymaq0Td6GAZXJhSy/fT1m7D/+14GAi9MIOf7RIqu2pDkzYRQ4poqhqk8Va2MO+f/AcVOIqYAI9KIqOaUaPn5qH4YZxLSyyzJEc0QIIuLizOg5KJzyuID9RoXf2WjxSbQfkdfyAMkvwS3x9xw6K1H8Nm2rrSKDVyOnclvgHJODSXrmlO2eXeGNwDmcHfnGrUZKzAhRjizt4SFDW/jB59v0kH+tb33o6m7ERsm227zEwwYrV6QU6tAFyg5DALIJabk5Q3XPAsOZyhBCGfuT0jR4deo8XMrYxEVPn2mYX+Niga3DBbgCSrAkKiZn7jqb6Yo8szecFuBFzVKuQLougUlvlF9/vRRRSHQ9J56pdIHQKGlzxttuvbrxcZSNY69QHS50l26ekn35sDz3BTemwV+L6aMRgtl5/7kSdpbmOI61y/gf4Ms4IbZpT4JymTBhMD2p7chPcfrlgXANC+Z1gJW33hdbvnwPxWj2MDFM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f7b338-f52c-41b7-91e9-99848aaef1be", "record_id": "flaws_cloudtrail:0000024:48f7b338-f52c-41b7-91e9-99848aaef1be", "row_index": 24, "timestamp": "2019-07-22T05:10:25Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARKSVQD3S0QAWCEFK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "254.38.152.152", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f7b338-f52c-41b7-91e9-99848aaef1be", "eventTime": "2019-07-22T05:10:25Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.38.152.152", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARKSVQD3S0QAWCEFK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T05:10:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]fb86e532d32dd82d4138e31e91bfb126", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d30719-2cea-4081-8f8b-9e1fa6eff492", "record_id": "flaws_cloudtrail:0000025:3d30719-2cea-4081-8f8b-9e1fa6eff492", "row_index": 25, "timestamp": "2019-07-22T05:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d30719-2cea-4081-8f8b-9e1fa6eff492", "eventTime": "2019-07-22T05:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHJSXOUK4AMKAAS98", "expiration": "Jul 22, 2019 12:04:40 PM", "sessionToken": "AgoJb3JpZ2luX2VjEE4aCXVzLXdlc3QtMiJHMEUCIQDplxL7MKIz8Zy8el/W56MPrXXDMCPNtZiu6Ftk9vfzWAIgHWv4DSHGRD5vGYM/ClNZ6elyK/IhDdB0C6Z9C1GJRL4q4wMIt///////////ARAAGgw5NzU0MjYyNjIwMjkiDPds6NoKAlCvwT8h5iq3A2Bq24Bw/iQpFA2Y4ASD+zrVfdau02U/BU8615g4wVaHAXuxAdXEqZ1D9HDGD2S2+zQeEs4kEW84YvNeyCHNPZkX+dk36q2PmVvUxwemLXb9aDJ5+EQDjBFHkLGWm3Y+Vm0kNdcVCrlyCI7LyfAw5M5o45x2XV+lt/YCHrXWjE94IrMxPiY+4iN0olUWgcWKQ9eLGmBfHKaXw0kF77VCGMc5CYFG8sSWeiICZPIHmfSYx0bOUtOlrjbvYzyDjiyNAsOqNMXy1Vd6pmOG3tk9M05h3wR9BTJiI3l3Ao33l0mSeyM9L6ZxNU9r07Bl8qGOgrF07ppsb+/J7eUlUybaKvPcAyVPVA8MmUKiagWSBxuXv6Zvn1DNr+GTPWSs+3un1Jg9/QEx5q9J8cmPOc9x8+rPzcBw7XYPRN09vQpIbpGY8Zujq4OevSLZTIz1eCOWYsfkJl10QcEVWET5TBqEgfiLx0/N6CLNczNewV4lu89eBwMqvEBs9bzAHYpbZIttsBkqbqQp6WATh5Wr6Ak55hg8QcKJK8NgAWViOEUhui2Isoi11w8yoW0rUtGnPCNb+T3jvYM/++4wqZTV6QU6tAE6zbyKv1QH7JQMU304Gpvy91gVhwl8IjbKk4566jR/oK5YdkPVYo8qwk1NiRqmA1L4fzQfGUQW+E47wELNOMGUzD1FClIyGT6EcOG0gQdFAouc99Lg0QHQf6qFXw9PlxvZpjwTL7DTljVq43b8RAJongQDHYFmQc6KhQCfMeucUr65SqfNm2xnCXsD6Uj2Q4xO0QhUdnz3HtTDlt1Qn5GvwUW9ArqbfW4CzHn7UdsixhwtmX4="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d30719-2cea-4081-8f8b-9e1fa6eff492", "record_id": "flaws_cloudtrail:0000026:3d30719-2cea-4081-8f8b-9e1fa6eff492", "row_index": 26, "timestamp": "2019-07-22T05:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d30719-2cea-4081-8f8b-9e1fa6eff492", "eventTime": "2019-07-22T05:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHJSXOUK4AMKAAS98", "expiration": "Jul 22, 2019 12:04:40 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69e59a38-575e-49b2-b206-7a710725a7019", "record_id": "flaws_cloudtrail:0000027:69e59a38-575e-49b2-b206-7a710725a7019", "row_index": 27, "timestamp": "2019-07-22T05:54:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69e59a38-575e-49b2-b206-7a710725a7019", "eventTime": "2019-07-22T05:54:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69e59a38-575e-49b2-b206-7a710725a7019", "record_id": "flaws_cloudtrail:0000028:69e59a38-575e-49b2-b206-7a710725a7019", "row_index": 28, "timestamp": "2019-07-22T05:54:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69e59a38-575e-49b2-b206-7a710725a7019", "eventTime": "2019-07-22T05:54:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "[aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b63d7a85-ceed-45ba-8176-3c7155af31c6", "record_id": "flaws_cloudtrail:0000029:b63d7a85-ceed-45ba-8176-3c7155af31c6", "row_index": 29, "timestamp": "2019-07-22T06:21:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b63d7a85-ceed-45ba-8176-3c7155af31c6", "eventTime": "2019-07-22T06:21:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIASDNX1ZMQ7E0TMVJ7", "expiration": "Jul 22, 2019 7:21:33 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b63d7a85-ceed-45ba-8176-3c7155af31c6", "record_id": "flaws_cloudtrail:0000030:b63d7a85-ceed-45ba-8176-3c7155af31c6", "row_index": 30, "timestamp": "2019-07-22T06:21:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b63d7a85-ceed-45ba-8176-3c7155af31c6", "eventTime": "2019-07-22T06:21:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIASDNX1ZMQ7E0TMVJ7", "expiration": "Jul 22, 2019 7:21:33 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f432000-b5d2-4ecf-a66f-4a160f3fb109", "record_id": "flaws_cloudtrail:0000031:66f432000-b5d2-4ecf-a66f-4a160f3fb109", "row_index": 31, "timestamp": "2019-07-22T06:31:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f432000-b5d2-4ecf-a66f-4a160f3fb109", "eventTime": "2019-07-22T06:31:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f432000-b5d2-4ecf-a66f-4a160f3fb109", "record_id": "flaws_cloudtrail:0000032:66f432000-b5d2-4ecf-a66f-4a160f3fb109", "row_index": 32, "timestamp": "2019-07-22T06:31:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f432000-b5d2-4ecf-a66f-4a160f3fb109", "eventTime": "2019-07-22T06:31:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d7596e-9399-45f5-aa72-d027b762da15", "record_id": "flaws_cloudtrail:0000033:51d7596e-9399-45f5-aa72-d027b762da15", "row_index": 33, "timestamp": "2019-07-22T06:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d7596e-9399-45f5-aa72-d027b762da15", "eventTime": "2019-07-22T06:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAARAI2EXR1ZSDSIQH", "expiration": "Jul 22, 2019 12:39:01 PM", "sessionToken": "AgoJb3JpZ2luX2VjEE8aCXVzLXdlc3QtMiJIMEYCIQChNmGRrdnNxi6x7xtaqogBV5C9sMMuRVHWD9nq6Yz7ugIhAJjGpR0QYSavLQWQPe/3HlqdYkalOm6XpEg395+fnCDbKuMDCLj//////////wEQABoMOTc1NDI2MjYyMDI5IgxRIFBhHbeUwBtVVtwqtwN9efYv3sWs78Q2yESh+ZSHcPOvWFut5rYlCBv0ukwc6sSzcpj9W2d17rp8NySI0xxhnjvia7AWHhRVdB9VowHe6bRSFUIXzsv5BubAJDLwGDiEK50sXt+SNnG4HbszC6abnponX0nqUS/4XbcQeYJLmxZo8pzOKM4XBPU/ZizDoAQMniYxowOd0In6Sh1oQ2arCX+4SkBnWXWKYCi8qdFWlqHhYgHZ8voY+N8yuAbDBjDSMQnfZtRnVb2R5u5TEg+B/IG0BUA32BWbT3pUXbvw3kgIccGez3MX2djRWQRfIvBIl7c/3f3JS9Ljwmj/Mlnx4cK2c6LafJ6W++zNhYr2L9JE1pt5C3/lEHG7KCfaasERTO6dZ+KBzmpTw05YOFKZT6i+hss3q32Uwp/4Xzo9eSLQtrSKMpLbkhtOd/kbeRkO7AfZLZ2VdPdjUUkfINMuOHuWx8E5kEiXoLkaaSkdZBLEI9Dhy8qO/i/NaKgTJuZcYj5k6lu0leoEVhON+EmdDQ62gzr2iZnWTxTcO1FVC5kJrwgO6X94W0CePwCF2tVmZUf7lZLkTNAavbKe6ZHPSZFHY0l1MLmw1ekFOrMB6kQ8ueyYo6ZOV4jhKxHCtqn8nCgVQT6oEupCDFCTrgbsccQUhXYvyv3h62OURbk2hetnpaE0VT2EoufRyfnWVGjDcvcwFIZA5sHnvZCMNtn7FOQLDrqfgG2N6KggtS89WmuCSsYMC63sh3UQs7yvz+j7xmNqew+KLdiO/VYtKVIISk1/QkJVXxg54a0WE05RFlINvhJdIVKfZza79yUDYhS0dtc8cWJLBUmEKXiBEEPfYKU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d7596e-9399-45f5-aa72-d027b762da15", "record_id": "flaws_cloudtrail:0000034:51d7596e-9399-45f5-aa72-d027b762da15", "row_index": 34, "timestamp": "2019-07-22T06:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d7596e-9399-45f5-aa72-d027b762da15", "eventTime": "2019-07-22T06:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAARAI2EXR1ZSDSIQH", "expiration": "Jul 22, 2019 12:39:01 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87d5b599-a075-4bb6-a530-a2ce036a62a1", "record_id": "flaws_cloudtrail:0000035:87d5b599-a075-4bb6-a530-a2ce036a62a1", "row_index": 35, "timestamp": "2019-07-22T06:31:23Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87d5b599-a075-4bb6-a530-a2ce036a62a1", "eventTime": "2019-07-22T06:31:23Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87d5b599-a075-4bb6-a530-a2ce036a62a1", "record_id": "flaws_cloudtrail:0000036:87d5b599-a075-4bb6-a530-a2ce036a62a1", "row_index": 36, "timestamp": "2019-07-22T06:31:23Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87d5b599-a075-4bb6-a530-a2ce036a62a1", "eventTime": "2019-07-22T06:31:23Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "record_id": "flaws_cloudtrail:0000037:4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "row_index": 37, "timestamp": "2019-07-22T06:31:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "eventTime": "2019-07-22T06:31:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "record_id": "flaws_cloudtrail:0000038:4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "row_index": 38, "timestamp": "2019-07-22T06:31:42Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "165.250.0.171", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ec5dcb2-bdaf-4d7f-9086-40b2c952466", "eventTime": "2019-07-22T06:31:42Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "165.250.0.171", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/10 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "record_id": "flaws_cloudtrail:0000039:f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "row_index": 39, "timestamp": "2019-07-22T06:31:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "eventTime": "2019-07-22T06:31:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYD2ZGAGKHNQAK60O", "expiration": "Jul 22, 2019 6:31:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "363bd62d-4d14-456b-afdd-e380a5ef5a53", "record_id": "flaws_cloudtrail:0000040:363bd62d-4d14-456b-afdd-e380a5ef5a53", "row_index": 40, "timestamp": "2019-07-22T06:31:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARKSVQD3S0QAWCEFK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "3.4.206.243", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "363bd62d-4d14-456b-afdd-e380a5ef5a53", "eventTime": "2019-07-22T06:31:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.4.206.243", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARKSVQD3S0QAWCEFK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T05:10:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]63fd204564103a2019e012553911536b", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "record_id": "flaws_cloudtrail:0000041:f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "row_index": 41, "timestamp": "2019-07-22T06:31:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9ae4428-7a46-4f52-b5e1-e6ce353c77c1", "eventTime": "2019-07-22T06:31:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYD2ZGAGKHNQAK60O", "expiration": "Jul 22, 2019 6:31:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "363bd62d-4d14-456b-afdd-e380a5ef5a53", "record_id": "flaws_cloudtrail:0000042:363bd62d-4d14-456b-afdd-e380a5ef5a53", "row_index": 42, "timestamp": "2019-07-22T06:31:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIARKSVQD3S0QAWCEFK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "3.4.206.243", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "363bd62d-4d14-456b-afdd-e380a5ef5a53", "eventTime": "2019-07-22T06:31:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.4.206.243", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIARKSVQD3S0QAWCEFK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T05:10:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]63fd204564103a2019e012553911536b", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e129379-7b71-4402-b00e-ca2857ec0bfa", "record_id": "flaws_cloudtrail:0000043:1e129379-7b71-4402-b00e-ca2857ec0bfa", "row_index": 43, "timestamp": "2019-07-22T07:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e129379-7b71-4402-b00e-ca2857ec0bfa", "eventTime": "2019-07-22T07:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACWREFO74SAZ24OYF", "expiration": "Jul 22, 2019 1:44:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e129379-7b71-4402-b00e-ca2857ec0bfa", "record_id": "flaws_cloudtrail:0000044:1e129379-7b71-4402-b00e-ca2857ec0bfa", "row_index": 44, "timestamp": "2019-07-22T07:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e129379-7b71-4402-b00e-ca2857ec0bfa", "eventTime": "2019-07-22T07:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACWREFO74SAZ24OYF", "expiration": "Jul 22, 2019 1:44:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200f5d7d-dacb-4484-9575-75bacafe2bf7", "record_id": "flaws_cloudtrail:0000045:200f5d7d-dacb-4484-9575-75bacafe2bf7", "row_index": 45, "timestamp": "2019-07-22T08:19:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200f5d7d-dacb-4484-9575-75bacafe2bf7", "eventTime": "2019-07-22T08:19:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADS7BVLKD017LFAB2", "expiration": "Jul 22, 2019 8:19:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "406f1ef4-0813-4ed9-b3c3-607148cb68b70", "record_id": "flaws_cloudtrail:0000046:406f1ef4-0813-4ed9-b3c3-607148cb68b70", "row_index": 46, "timestamp": "2019-07-22T08:19:53Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIABNQGLVDX51MPFAJS", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.78.230.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "406f1ef4-0813-4ed9-b3c3-607148cb68b70", "eventTime": "2019-07-22T08:19:53Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.78.230.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIABNQGLVDX51MPFAJS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T08:19:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]9741be4813060990b3ae3df6c3125dc5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0cb8eb2-c37f-4caa-8557-92900cfe5e", "record_id": "flaws_cloudtrail:0000047:f0cb8eb2-c37f-4caa-8557-92900cfe5e", "row_index": 47, "timestamp": "2019-07-22T08:19:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1616, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0cb8eb2-c37f-4caa-8557-92900cfe5e", "eventTime": "2019-07-22T08:19:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIABNQGLVDX51MPFAJS", "expiration": "Jul 22, 2019 8:19:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200f5d7d-dacb-4484-9575-75bacafe2bf7", "record_id": "flaws_cloudtrail:0000048:200f5d7d-dacb-4484-9575-75bacafe2bf7", "row_index": 48, "timestamp": "2019-07-22T08:19:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200f5d7d-dacb-4484-9575-75bacafe2bf7", "eventTime": "2019-07-22T08:19:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIADS7BVLKD017LFAB2", "expiration": "Jul 22, 2019 8:19:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "406f1ef4-0813-4ed9-b3c3-607148cb68b70", "record_id": "flaws_cloudtrail:0000049:406f1ef4-0813-4ed9-b3c3-607148cb68b70", "row_index": 49, "timestamp": "2019-07-22T08:19:53Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIABNQGLVDX51MPFAJS", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.78.230.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "406f1ef4-0813-4ed9-b3c3-607148cb68b70", "eventTime": "2019-07-22T08:19:53Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.78.230.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIABNQGLVDX51MPFAJS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T08:19:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]9741be4813060990b3ae3df6c3125dc5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0cb8eb2-c37f-4caa-8557-92900cfe5e", "record_id": "flaws_cloudtrail:0000050:f0cb8eb2-c37f-4caa-8557-92900cfe5e", "row_index": 50, "timestamp": "2019-07-22T08:19:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1616, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0cb8eb2-c37f-4caa-8557-92900cfe5e", "eventTime": "2019-07-22T08:19:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIABNQGLVDX51MPFAJS", "expiration": "Jul 22, 2019 8:19:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe11f12-27e0-4479-b132-08fdc3117c64", "record_id": "flaws_cloudtrail:0000051:1fe11f12-27e0-4479-b132-08fdc3117c64", "row_index": 51, "timestamp": "2019-07-22T08:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe11f12-27e0-4479-b132-08fdc3117c64", "eventTime": "2019-07-22T08:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS5P6AGSK62D5PTRR", "expiration": "Jul 22, 2019 2:58:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe11f12-27e0-4479-b132-08fdc3117c64", "record_id": "flaws_cloudtrail:0000052:1fe11f12-27e0-4479-b132-08fdc3117c64", "row_index": 52, "timestamp": "2019-07-22T08:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe11f12-27e0-4479-b132-08fdc3117c64", "eventTime": "2019-07-22T08:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS5P6AGSK62D5PTRR", "expiration": "Jul 22, 2019 2:58:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "894b921c-8466-42c7-9683-bf56e0b3257b", "record_id": "flaws_cloudtrail:0000053:894b921c-8466-42c7-9683-bf56e0b3257b", "row_index": 53, "timestamp": "2019-07-22T08:33:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "[aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "894b921c-8466-42c7-9683-bf56e0b3257b", "eventTime": "2019-07-22T08:33:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "[aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "894b921c-8466-42c7-9683-bf56e0b3257b", "record_id": "flaws_cloudtrail:0000054:894b921c-8466-42c7-9683-bf56e0b3257b", "row_index": 54, "timestamp": "2019-07-22T08:33:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "[aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "894b921c-8466-42c7-9683-bf56e0b3257b", "eventTime": "2019-07-22T08:33:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "[aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72429d-710b-49c7-9a99-721eea7d291a", "record_id": "flaws_cloudtrail:0000055:72429d-710b-49c7-9a99-721eea7d291a", "row_index": 55, "timestamp": "2019-07-22T08:35:04Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72429d-710b-49c7-9a99-721eea7d291a", "eventTime": "2019-07-22T08:35:04Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72429d-710b-49c7-9a99-721eea7d291a", "record_id": "flaws_cloudtrail:0000056:72429d-710b-49c7-9a99-721eea7d291a", "row_index": 56, "timestamp": "2019-07-22T08:35:04Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72429d-710b-49c7-9a99-721eea7d291a", "eventTime": "2019-07-22T08:35:04Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fac23b-7bb6-4a17-b55f-3bd3c623453a", "record_id": "flaws_cloudtrail:0000057:09fac23b-7bb6-4a17-b55f-3bd3c623453a", "row_index": 57, "timestamp": "2019-07-22T08:35:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fac23b-7bb6-4a17-b55f-3bd3c623453a", "eventTime": "2019-07-22T08:35:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fac23b-7bb6-4a17-b55f-3bd3c623453a", "record_id": "flaws_cloudtrail:0000058:09fac23b-7bb6-4a17-b55f-3bd3c623453a", "row_index": 58, "timestamp": "2019-07-22T08:35:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fac23b-7bb6-4a17-b55f-3bd3c623453a", "eventTime": "2019-07-22T08:35:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472f0f81-eeb1-462f-acbc-816af80a1027", "record_id": "flaws_cloudtrail:0000059:472f0f81-eeb1-462f-acbc-816af80a1027", "row_index": 59, "timestamp": "2019-07-22T08:35:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472f0f81-eeb1-462f-acbc-816af80a1027", "eventTime": "2019-07-22T08:35:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzaWlUWDBJamxYVGdaMXRQM2t5WWl3TEFXNDNvakQ3UXZ5WVpLWGh4N1M0cXNjWHIrMGJGdU5iV2dMSmpKbzhiUkRWWkk0Uk9TRzdBdWo4SllWQ1lYTVV4TnRTUlMvMG16K21GNElXQ0ljUUdEaDBhdUVaTjlWQmZUZEV4RTU4c2ZsL3NYdmswV1V0RzZSTHN3SEZITTVXRE5xblVrbnAwNW9XVndQSUFTYnRQKzJLMVBzK09xR2J1c2haOGFkNy9OWWU4Y0U4bm1ONVgiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472f0f81-eeb1-462f-acbc-816af80a1027", "record_id": "flaws_cloudtrail:0000060:472f0f81-eeb1-462f-acbc-816af80a1027", "row_index": 60, "timestamp": "2019-07-22T08:35:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472f0f81-eeb1-462f-acbc-816af80a1027", "eventTime": "2019-07-22T08:35:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzaWlUWDBJamxYVGdaMXRQM2t5WWl3TEFXNDNvakQ3UXZ5WVpLWGh4N1M0cXNjWHIrMGJGdU5iV2dMSmpKbzhiUkRWWkk0Uk9TRzdBdWo4SllWQ1lYTVV4TnRTUlMvMG16K21GNElXQ0ljUUdEaDBhdUVaTjlWQmZUZEV4RTU4c2ZsL3NYdmswV1V0RzZSTHN3SEZITTVXRE5xblVrbnAwNW9XVndQSUFTYnRQKzJLMVBzK09xR2J1c2haOGFkNy9OWWU4Y0U4bm1ONVgiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b0435d-35d7-4653-9217-1b9f828ebf30", "record_id": "flaws_cloudtrail:0000061:36b0435d-35d7-4653-9217-1b9f828ebf30", "row_index": 61, "timestamp": "2019-07-22T08:35:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b0435d-35d7-4653-9217-1b9f828ebf30", "eventTime": "2019-07-22T08:35:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYNitYeGcxTGkvSGRPRFU5VTY3WTdZZkJwNXB6TmRWVHlNUlFJTzlJMVRwUFZSY2lyVzZKdzN2QlRQcGVzT0lQR0d2dDlUOFN6UG5JYlVBM201bEFDM3VEcVJPRmIveFNkRml0cWhZa2plaE93ZC8xbVBHMyt3RldFUUw1dGVBSERlekNKMW16cmNxN2ExSWkrRUJzQ2hXMmtJN1BMemZqMC9DQVpSUUdsNDl5NElEamFzSWtiNlgrZ2lEemNiK2FUeGVNT3JiZlgwRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36b0435d-35d7-4653-9217-1b9f828ebf30", "record_id": "flaws_cloudtrail:0000062:36b0435d-35d7-4653-9217-1b9f828ebf30", "row_index": 62, "timestamp": "2019-07-22T08:35:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36b0435d-35d7-4653-9217-1b9f828ebf30", "eventTime": "2019-07-22T08:35:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYNitYeGcxTGkvSGRPRFU5VTY3WTdZZkJwNXB6TmRWVHlNUlFJTzlJMVRwUFZSY2lyVzZKdzN2QlRQcGVzT0lQR0d2dDlUOFN6UG5JYlVBM201bEFDM3VEcVJPRmIveFNkRml0cWhZa2plaE93ZC8xbVBHMyt3RldFUUw1dGVBSERlekNKMW16cmNxN2ExSWkrRUJzQ2hXMmtJN1BMemZqMC9DQVpSUUdsNDl5NElEamFzSWtiNlgrZ2lEemNiK2FUeGVNT3JiZlgwRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021467-7b22-496c-b972-d312230bae6d7", "record_id": "flaws_cloudtrail:0000063:021467-7b22-496c-b972-d312230bae6d7", "row_index": 63, "timestamp": "2019-07-22T08:35:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021467-7b22-496c-b972-d312230bae6d7", "eventTime": "2019-07-22T08:35:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBWVBpWlkvSVpQZGhiWVNrcDd4MUx6SCtmZDJoc1VvbmxSbk03M1Rmb2gvaXo0MGhIQnRRbHMyeEJzVVZEVm9ETS91cUgzRnYrOTRUdTF4NzZVWmhsWE1xUHQ1Tks0MWZiRzVjV284N0hrd09qT2RHZ3pZRHo1NHV1bi9UYUlTOGE2ajV5THZTNjE4bmRYRnVnZE5SMlJxMzY5djJOV2hIbWxUZXkzTHNzaGdTcVlXSDc4cWJlRWF1TUtMZXRHZnMyVjJqKzVhSmw3SkQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021467-7b22-496c-b972-d312230bae6d7", "record_id": "flaws_cloudtrail:0000064:021467-7b22-496c-b972-d312230bae6d7", "row_index": 64, "timestamp": "2019-07-22T08:35:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021467-7b22-496c-b972-d312230bae6d7", "eventTime": "2019-07-22T08:35:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBWVBpWlkvSVpQZGhiWVNrcDd4MUx6SCtmZDJoc1VvbmxSbk03M1Rmb2gvaXo0MGhIQnRRbHMyeEJzVVZEVm9ETS91cUgzRnYrOTRUdTF4NzZVWmhsWE1xUHQ1Tks0MWZiRzVjV284N0hrd09qT2RHZ3pZRHo1NHV1bi9UYUlTOGE2ajV5THZTNjE4bmRYRnVnZE5SMlJxMzY5djJOV2hIbWxUZXkzTHNzaGdTcVlXSDc4cWJlRWF1TUtMZXRHZnMyVjJqKzVhSmw3SkQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce7da417-b8eb-4775-9734-3997cd7e9c36", "record_id": "flaws_cloudtrail:0000065:ce7da417-b8eb-4775-9734-3997cd7e9c36", "row_index": 65, "timestamp": "2019-07-22T08:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce7da417-b8eb-4775-9734-3997cd7e9c36", "eventTime": "2019-07-22T08:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhWWNLTUg1MkFmUTcvcjdWWktxVjJzaGxwbFhNNDVOVXVuUlFxMm01VDlRR3V1SS9wVDRaTmd6dE9aUURlMkRSK1VSVVNWUWlvYUgzdEZtYlF6UVdrUytEV3Y2bjAwSFl6S0s0dDZDZXBteFlsNE9Vd2R6MjNoWGlIRFJtVUQ1N3IyeTlheDE1dUdQSzdwTmdUQWh2cGhidHF1OTFPK09FNW42bGRZTjNsZEZkd1BjZy8rWERNWjNGMmhNVUtTa3NiQXVPekg5cTZaMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce7da417-b8eb-4775-9734-3997cd7e9c36", "record_id": "flaws_cloudtrail:0000066:ce7da417-b8eb-4775-9734-3997cd7e9c36", "row_index": 66, "timestamp": "2019-07-22T08:35:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce7da417-b8eb-4775-9734-3997cd7e9c36", "eventTime": "2019-07-22T08:35:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhWWNLTUg1MkFmUTcvcjdWWktxVjJzaGxwbFhNNDVOVXVuUlFxMm01VDlRR3V1SS9wVDRaTmd6dE9aUURlMkRSK1VSVVNWUWlvYUgzdEZtYlF6UVdrUytEV3Y2bjAwSFl6S0s0dDZDZXBteFlsNE9Vd2R6MjNoWGlIRFJtVUQ1N3IyeTlheDE1dUdQSzdwTmdUQWh2cGhidHF1OTFPK09FNW42bGRZTjNsZEZkd1BjZy8rWERNWjNGMmhNVUtTa3NiQXVPekg5cTZaMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6674d6ed-bee9-429b-a2dc-2799d0b205cd", "record_id": "flaws_cloudtrail:0000067:6674d6ed-bee9-429b-a2dc-2799d0b205cd", "row_index": 67, "timestamp": "2019-07-22T08:35:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6674d6ed-bee9-429b-a2dc-2799d0b205cd", "eventTime": "2019-07-22T08:35:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5MmdGcmRDdlk5T1pTS2dVYVJubmJZdkhsL1puTGFrRlJmbkxyRnhIWWMrdDlWbkxZeE9EbEsxaWdoNnlqcDNudEU1UUNJbXFteU5vWFlIYmxQZ2UxZkFJYVNGNnFVTVN5c1N3NGlCMVlteE1BaVg5V052QW0zVUNldy9FYVJ0K0ZuNzl2UGxpMWRiTGJFMUQ5WVlQb01mbFEwak9OV2RPRWlaZEU3N015Mi8zZ2VqUVVWSFAyTm1MUUZWbDN5bzhWU3dHQS9qWEppND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6674d6ed-bee9-429b-a2dc-2799d0b205cd", "record_id": "flaws_cloudtrail:0000068:6674d6ed-bee9-429b-a2dc-2799d0b205cd", "row_index": 68, "timestamp": "2019-07-22T08:35:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6674d6ed-bee9-429b-a2dc-2799d0b205cd", "eventTime": "2019-07-22T08:35:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5MmdGcmRDdlk5T1pTS2dVYVJubmJZdkhsL1puTGFrRlJmbkxyRnhIWWMrdDlWbkxZeE9EbEsxaWdoNnlqcDNudEU1UUNJbXFteU5vWFlIYmxQZ2UxZkFJYVNGNnFVTVN5c1N3NGlCMVlteE1BaVg5V052QW0zVUNldy9FYVJ0K0ZuNzl2UGxpMWRiTGJFMUQ5WVlQb01mbFEwak9OV2RPRWlaZEU3N015Mi8zZ2VqUVVWSFAyTm1MUUZWbDN5bzhWU3dHQS9qWEppND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b949a8e-1728-4ef0-8863-f8a5a94737", "record_id": "flaws_cloudtrail:0000069:2b949a8e-1728-4ef0-8863-f8a5a94737", "row_index": 69, "timestamp": "2019-07-22T08:35:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b949a8e-1728-4ef0-8863-f8a5a94737", "eventTime": "2019-07-22T08:35:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V3EwYktEbEdSdzh1VUcvb05ISmRvc1pTdlNiSTFuZUZZUm5oaWs4RUk4OG4vbnVmblI4cVlRUm9LUDlIVXBQb3VjU0xkd1plaGN1MjZqcnUrbXdoV25ZemJwR0g4NXArS1FCYWNTRThRQWtHUXpqclpqYVU3TmM2OTRpY3B3L0JTNkx0eVVkbVBaOGIxSkl6Vld4OXNNL1pPZ2RtZHBqMlVrSEM4R0ZDMERXRGFEV1NzNmMxSDg3TmUwc3pUekdweGYySXRNbll5cWQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b949a8e-1728-4ef0-8863-f8a5a94737", "record_id": "flaws_cloudtrail:0000070:2b949a8e-1728-4ef0-8863-f8a5a94737", "row_index": 70, "timestamp": "2019-07-22T08:35:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b949a8e-1728-4ef0-8863-f8a5a94737", "eventTime": "2019-07-22T08:35:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3V3EwYktEbEdSdzh1VUcvb05ISmRvc1pTdlNiSTFuZUZZUm5oaWs4RUk4OG4vbnVmblI4cVlRUm9LUDlIVXBQb3VjU0xkd1plaGN1MjZqcnUrbXdoV25ZemJwR0g4NXArS1FCYWNTRThRQWtHUXpqclpqYVU3TmM2OTRpY3B3L0JTNkx0eVVkbVBaOGIxSkl6Vld4OXNNL1pPZ2RtZHBqMlVrSEM4R0ZDMERXRGFEV1NzNmMxSDg3TmUwc3pUekdweGYySXRNbll5cWQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c3b142e-ec9e-4532-8467-f70787ed64", "record_id": "flaws_cloudtrail:0000071:7c3b142e-ec9e-4532-8467-f70787ed64", "row_index": 71, "timestamp": "2019-07-22T08:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c3b142e-ec9e-4532-8467-f70787ed64", "eventTime": "2019-07-22T08:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwZXF0S09WTHl1Tzk3bStFbDRCMFZncWl6ajlDdkZBVGxDS1JWMHpjcUZkN28rNnpua3VyS3B0RVJncFI1YXNWOHU2K0JlTkQyMElkajdFa3RnTGx3QldtaHJyb0FKdzMvRHRWelcwNWdZN2U5U09CMzVYSjZkTklTckNWK2hHb0hreWtyNUxhVXVEOEo4Z2UxL0trVGNIM01pdzZVRno2OWhXSUNEbEtDZ3ZDbmdHb2RzVmcvTTRsU0srOUZUSzBiT24wdTh3ZWFRbEsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c3b142e-ec9e-4532-8467-f70787ed64", "record_id": "flaws_cloudtrail:0000072:7c3b142e-ec9e-4532-8467-f70787ed64", "row_index": 72, "timestamp": "2019-07-22T08:35:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c3b142e-ec9e-4532-8467-f70787ed64", "eventTime": "2019-07-22T08:35:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwZXF0S09WTHl1Tzk3bStFbDRCMFZncWl6ajlDdkZBVGxDS1JWMHpjcUZkN28rNnpua3VyS3B0RVJncFI1YXNWOHU2K0JlTkQyMElkajdFa3RnTGx3QldtaHJyb0FKdzMvRHRWelcwNWdZN2U5U09CMzVYSjZkTklTckNWK2hHb0hreWtyNUxhVXVEOEo4Z2UxL0trVGNIM01pdzZVRno2OWhXSUNEbEtDZ3ZDbmdHb2RzVmcvTTRsU0srOUZUSzBiT24wdTh3ZWFRbEsiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bde469-29f9-4a1f-a50d-70c234b37613", "record_id": "flaws_cloudtrail:0000073:51bde469-29f9-4a1f-a50d-70c234b37613", "row_index": 73, "timestamp": "2019-07-22T08:35:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bde469-29f9-4a1f-a50d-70c234b37613", "eventTime": "2019-07-22T08:35:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaXdRN29TOVh3SmYyRlE4WFd5cDdiaXZFN3pjazF0WnZITWxhZDNsU1A3UUlGUE9qellnZmVHT3NhYU1kNmhsNlRBVmw3WXdTQ2J6aklkbDdqODZWYXdlWEtnd3JCdFJZVUZEQkpycFFVMUFQY0wwL1hDZTQ0OXVNY09ONlkvUHZvc1RYOUlKelo3QWdUbEtlVkZldkZONVY1dGhqaFBaK01FWGN0Z2xsK0VFVHVKUXdUd3prQ2tVK2xQdzR2SlNubGkvL1RIZmdhTDciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b99b8ed-ae88-4a14-b108-230e9d78705", "record_id": "flaws_cloudtrail:0000074:2b99b8ed-ae88-4a14-b108-230e9d78705", "row_index": 74, "timestamp": "2019-07-22T08:35:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b99b8ed-ae88-4a14-b108-230e9d78705", "eventTime": "2019-07-22T08:35:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTUZrc1VoUVUvbzZoaFU2L3dkOS9oU0thV3lDR0puUXM5VW1RdmhvRUNRdG1XUWw1WlBRcWwwTVFNMjVkejY4a3dpeVcvVXBIWThhZHNNb0RlVXRsT3YzZ3QvalYyRFMxR3U3dTN6RmZOWTdBcEZtdzNzS3RsK2JnSUVoOExiam4xU1AwbVR3VllwZjd6NFhOamxYMVBiYi9FT1pmd1FJYmhGOHd6U3MrUWVNQkt3Szh6Vk9wMDJZMkhaM3d1ZHdTVk1GN2FmZmtBbkwiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51bde469-29f9-4a1f-a50d-70c234b37613", "record_id": "flaws_cloudtrail:0000075:51bde469-29f9-4a1f-a50d-70c234b37613", "row_index": 75, "timestamp": "2019-07-22T08:35:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51bde469-29f9-4a1f-a50d-70c234b37613", "eventTime": "2019-07-22T08:35:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaXdRN29TOVh3SmYyRlE4WFd5cDdiaXZFN3pjazF0WnZITWxhZDNsU1A3UUlGUE9qellnZmVHT3NhYU1kNmhsNlRBVmw3WXdTQ2J6aklkbDdqODZWYXdlWEtnd3JCdFJZVUZEQkpycFFVMUFQY0wwL1hDZTQ0OXVNY09ONlkvUHZvc1RYOUlKelo3QWdUbEtlVkZldkZONVY1dGhqaFBaK01FWGN0Z2xsK0VFVHVKUXdUd3prQ2tVK2xQdzR2SlNubGkvL1RIZmdhTDciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b99b8ed-ae88-4a14-b108-230e9d78705", "record_id": "flaws_cloudtrail:0000076:2b99b8ed-ae88-4a14-b108-230e9d78705", "row_index": 76, "timestamp": "2019-07-22T08:35:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b99b8ed-ae88-4a14-b108-230e9d78705", "eventTime": "2019-07-22T08:35:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTUZrc1VoUVUvbzZoaFU2L3dkOS9oU0thV3lDR0puUXM5VW1RdmhvRUNRdG1XUWw1WlBRcWwwTVFNMjVkejY4a3dpeVcvVXBIWThhZHNNb0RlVXRsT3YzZ3QvalYyRFMxR3U3dTN6RmZOWTdBcEZtdzNzS3RsK2JnSUVoOExiam4xU1AwbVR3VllwZjd6NFhOamxYMVBiYi9FT1pmd1FJYmhGOHd6U3MrUWVNQkt3Szh6Vk9wMDJZMkhaM3d1ZHdTVk1GN2FmZmtBbkwiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "record_id": "flaws_cloudtrail:0000077:f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "row_index": 77, "timestamp": "2019-07-22T08:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "eventTime": "2019-07-22T08:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSM2FoZktrWGQ0RkJJZWlTb0FQdW1ZWWhsVzJzNnR6NEI2Y2hHZVZnbUMxUHBYN3paRExBM0xKTUxZYU82d1FTT2dPUFRVTitBS3RpOWZSWTdVWG56d0hHbWJCdEs4cTV6ck9EYS9XaDM4Rll6dnNXdlVTNTRjMThiNU1BeUhtZWhmeWM3ckkrUGZoM0lWSmwvK2p6V01WOStyQkJEano1L0tuYnM1ejJmL2xNRkpHTlllMzJERVllWjF3RVJNdlgxOHM2T3Nod2dobGkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "record_id": "flaws_cloudtrail:0000078:f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "row_index": 78, "timestamp": "2019-07-22T08:35:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76a64f6-95a6-4e51-ac07-eef5cc5a0084", "eventTime": "2019-07-22T08:35:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSM2FoZktrWGQ0RkJJZWlTb0FQdW1ZWWhsVzJzNnR6NEI2Y2hHZVZnbUMxUHBYN3paRExBM0xKTUxZYU82d1FTT2dPUFRVTitBS3RpOWZSWTdVWG56d0hHbWJCdEs4cTV6ck9EYS9XaDM4Rll6dnNXdlVTNTRjMThiNU1BeUhtZWhmeWM3ckkrUGZoM0lWSmwvK2p6V01WOStyQkJEano1L0tuYnM1ejJmL2xNRkpHTlllMzJERVllWjF3RVJNdlgxOHM2T3Nod2dobGkiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7320ce6-bd09-48e3-a713-9197a025719e", "record_id": "flaws_cloudtrail:0000079:e7320ce6-bd09-48e3-a713-9197a025719e", "row_index": 79, "timestamp": "2019-07-22T08:35:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7320ce6-bd09-48e3-a713-9197a025719e", "eventTime": "2019-07-22T08:35:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwcFFGeXBLUm9Jdzdsak1uWTV1dGZMV3VxYW1IZk9vNTJudU4wRzZGbWZDOU03S3ZqNjlTOXNPRyt0YnBMZG1lTE94Yk1oYjhpRyszcjRZT0hJbVMxbWQzY0VXbnhXZGpRSWI3cFk1akZUaW1FbUtzTHluK3llT3d2RW9sb0FENXFCVTZlVVJaUzZYdnVMMXF3REZtdDRXQ1l5UTU3a3ppcVhQMzVwVkFuazFjZ1pjVW54cDE1Ty9YT2tFc3BSZjgweEZ0cDI5US9rQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7320ce6-bd09-48e3-a713-9197a025719e", "record_id": "flaws_cloudtrail:0000080:e7320ce6-bd09-48e3-a713-9197a025719e", "row_index": 80, "timestamp": "2019-07-22T08:35:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7320ce6-bd09-48e3-a713-9197a025719e", "eventTime": "2019-07-22T08:35:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwcFFGeXBLUm9Jdzdsak1uWTV1dGZMV3VxYW1IZk9vNTJudU4wRzZGbWZDOU03S3ZqNjlTOXNPRyt0YnBMZG1lTE94Yk1oYjhpRyszcjRZT0hJbVMxbWQzY0VXbnhXZGpRSWI3cFk1akZUaW1FbUtzTHluK3llT3d2RW9sb0FENXFCVTZlVVJaUzZYdnVMMXF3REZtdDRXQ1l5UTU3a3ppcVhQMzVwVkFuazFjZ1pjVW54cDE1Ty9YT2tFc3BSZjgweEZ0cDI5US9rQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe2732a-857a-4ead-9c0d-9258e9e5236b", "record_id": "flaws_cloudtrail:0000081:fbe2732a-857a-4ead-9c0d-9258e9e5236b", "row_index": 81, "timestamp": "2019-07-22T08:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe2732a-857a-4ead-9c0d-9258e9e5236b", "eventTime": "2019-07-22T08:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2clppZExTbCt0VzdVOVZzMk9xZ0JtOThsM2RHRmVmelEyaCtaOElicWhQMGpYSS9uMENvbW4rM21MT3c1L2N1dlJGa3RDbTZjZi9tMDNjNFhqem5sb0dRT1lwVmR5SktQbWZkM2Uwc3lya2NBUTIxWHNXR1BqWkN3ZzlrSjJjaDdoTUR0d0NMVWptMi8zUDRhaWxGMG04L0dxa1U5QmppYytSVlZTMjhBVW9XcWYrMDBra2FsNjYzamFCRDA5eGxMTlVJL1ptZFA0eE0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "670c79b2-4eac-4b1c-b836-ab953f72ed0c", "record_id": "flaws_cloudtrail:0000082:670c79b2-4eac-4b1c-b836-ab953f72ed0c", "row_index": 82, "timestamp": "2019-07-22T08:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "670c79b2-4eac-4b1c-b836-ab953f72ed0c", "eventTime": "2019-07-22T08:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxTkg0M0pzR3B2eFhUYWRxalgwRm52QmVjRm5GVExZQzY5Z3ZySE01eWx2UUVFcEtwM0d6VGJkUit0dWVFNTFRTlBhSURjeEJrb29NSWJKWkhzeWlZUER4WGdHTUI0cmpWVkJ5MFBLckhRMytrdG1NNjlYd3ZobjJISStCMGhiVTdlSS9oZUhZanI0SGNSZ0NHV0VMNllXMnFkWmlKZVQweHYvanBXaUlxaXBySHk4a0NoT2x2VTNEMG1PNWs5SkhRQnh5T2ZFSSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe2732a-857a-4ead-9c0d-9258e9e5236b", "record_id": "flaws_cloudtrail:0000083:fbe2732a-857a-4ead-9c0d-9258e9e5236b", "row_index": 83, "timestamp": "2019-07-22T08:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe2732a-857a-4ead-9c0d-9258e9e5236b", "eventTime": "2019-07-22T08:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2clppZExTbCt0VzdVOVZzMk9xZ0JtOThsM2RHRmVmelEyaCtaOElicWhQMGpYSS9uMENvbW4rM21MT3c1L2N1dlJGa3RDbTZjZi9tMDNjNFhqem5sb0dRT1lwVmR5SktQbWZkM2Uwc3lya2NBUTIxWHNXR1BqWkN3ZzlrSjJjaDdoTUR0d0NMVWptMi8zUDRhaWxGMG04L0dxa1U5QmppYytSVlZTMjhBVW9XcWYrMDBra2FsNjYzamFCRDA5eGxMTlVJL1ptZFA0eE0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "670c79b2-4eac-4b1c-b836-ab953f72ed0c", "record_id": "flaws_cloudtrail:0000084:670c79b2-4eac-4b1c-b836-ab953f72ed0c", "row_index": 84, "timestamp": "2019-07-22T08:35:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "670c79b2-4eac-4b1c-b836-ab953f72ed0c", "eventTime": "2019-07-22T08:35:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxTkg0M0pzR3B2eFhUYWRxalgwRm52QmVjRm5GVExZQzY5Z3ZySE01eWx2UUVFcEtwM0d6VGJkUit0dWVFNTFRTlBhSURjeEJrb29NSWJKWkhzeWlZUER4WGdHTUI0cmpWVkJ5MFBLckhRMytrdG1NNjlYd3ZobjJISStCMGhiVTdlSS9oZUhZanI0SGNSZ0NHV0VMNllXMnFkWmlKZVQweHYvanBXaUlxaXBySHk4a0NoT2x2VTNEMG1PNWs5SkhRQnh5T2ZFSSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056548a8b-1132-4e4c-a692-558d3fcadc34", "record_id": "flaws_cloudtrail:0000085:056548a8b-1132-4e4c-a692-558d3fcadc34", "row_index": 85, "timestamp": "2019-07-22T08:35:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056548a8b-1132-4e4c-a692-558d3fcadc34", "eventTime": "2019-07-22T08:35:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0WGZqK1hJeC8xTWhRZWk5TWtjME9ic0ZPbzNaWTlUSzdkSk9zaGR0TVpNYUhOK3VWMTdpWVhqNzVCaEM5eWY1ckxSK2Y0WjFXQUhxTHFvdXN0dFlRS1RTM0JyT05EeDlTMDYxSlhneVB6WG9rZlVWN0Rmemh2TjNvc3MyT2c3OUpYRERJQXNQQjFTZmJrWkJOaWFOQkc1cUgvU1FWUEo1OHVHSjI0Q0xOdlo5SVJQVWVFL1VlSmNmZE5LR21DUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "record_id": "flaws_cloudtrail:0000086:499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "row_index": 86, "timestamp": "2019-07-22T08:35:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "eventTime": "2019-07-22T08:35:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0QkZCQ1o2SHFDcjRsWXQ5c1BaRThUakdrbEZaQysrb1NRRlZTSGVyditaOE4yd0hPcDYxemJhdUlxVGRXMnV0bS8reXhUTFRhMERSMHpVaDhROHNpM1RvclhPbUhMRFNTam5xSkNFRTlLQ01Kajc3dGVpenAydkFZcW1IVEdOWU43UVhQQ2NrdjhZbnhid2U2b2N6R0Z5TFZlbit2V01ZSlVadzlWNnZoU1k3cVUzY0plWUxuT2FlNmdudmlxdHlEUytHRjJ3WDZnYjU0RHhZR1FXb2hLb2VBbXVxekhnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056548a8b-1132-4e4c-a692-558d3fcadc34", "record_id": "flaws_cloudtrail:0000087:056548a8b-1132-4e4c-a692-558d3fcadc34", "row_index": 87, "timestamp": "2019-07-22T08:35:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056548a8b-1132-4e4c-a692-558d3fcadc34", "eventTime": "2019-07-22T08:35:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0WGZqK1hJeC8xTWhRZWk5TWtjME9ic0ZPbzNaWTlUSzdkSk9zaGR0TVpNYUhOK3VWMTdpWVhqNzVCaEM5eWY1ckxSK2Y0WjFXQUhxTHFvdXN0dFlRS1RTM0JyT05EeDlTMDYxSlhneVB6WG9rZlVWN0Rmemh2TjNvc3MyT2c3OUpYRERJQXNQQjFTZmJrWkJOaWFOQkc1cUgvU1FWUEo1OHVHSjI0Q0xOdlo5SVJQVWVFL1VlSmNmZE5LR21DUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "record_id": "flaws_cloudtrail:0000088:499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "row_index": 88, "timestamp": "2019-07-22T08:35:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499e5e87-e5dc-4f9d-a840-3cf775fa21d3", "eventTime": "2019-07-22T08:35:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0QkZCQ1o2SHFDcjRsWXQ5c1BaRThUakdrbEZaQysrb1NRRlZTSGVyditaOE4yd0hPcDYxemJhdUlxVGRXMnV0bS8reXhUTFRhMERSMHpVaDhROHNpM1RvclhPbUhMRFNTam5xSkNFRTlLQ01Kajc3dGVpenAydkFZcW1IVEdOWU43UVhQQ2NrdjhZbnhid2U2b2N6R0Z5TFZlbit2V01ZSlVadzlWNnZoU1k3cVUzY0plWUxuT2FlNmdudmlxdHlEUytHRjJ3WDZnYjU0RHhZR1FXb2hLb2VBbXVxekhnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665dadc4-c344-4d6f-9e62-eb34ec14824d", "record_id": "flaws_cloudtrail:0000089:665dadc4-c344-4d6f-9e62-eb34ec14824d", "row_index": 89, "timestamp": "2019-07-22T08:35:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665dadc4-c344-4d6f-9e62-eb34ec14824d", "eventTime": "2019-07-22T08:35:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNSlpIWFBlU1UxdExQc0F1bm9Qd1gxRWNZblk5ZnBhK2oyMENYZlF4Z242WEpJZGJNR01QR0tRU0gyNitEQnJtZ3RuaUlZTzZCd0tYZm9BWWxnenBHc21lWEQwOFJSYzBBT2g1SWFickxINENzWGFBb0wyZW5zU3NOeGlNb1ZvWmJrN0pGSWNPUzEreENxNEcxN1NJTVExLy9iZXZhMllpTXJQWWxxRkh5WmtFUWhldENaZDErTlNPVzZUWENCZmpNRHJFcC9DR0lXb2tyaENNeVRQVSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "record_id": "flaws_cloudtrail:0000090:3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "row_index": 90, "timestamp": "2019-07-22T08:35:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "eventTime": "2019-07-22T08:35:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVeGlBeStvbTN3VWppdEh5V1E5OXNJVFJyVkRzV1hQb1FSTXlGd0hBMzJROWhZdXFBOUVpVDUxTEwrM1k5L3RvM1VRa2FQOGtiODVCMmNmQ3dtaTI0NGoyWjdVSXBoYWh5eXBlT2FWQ0dQVXY0WkZqeW0yOWNIRVJNYStweVJsbDhjbDl6UE01MGgzMW90NXhTR1RRZVVuUjlQcmZRR3JWeVBwR0ZXOXlLRGZzQmZEQ2NzNmRVN2FKZXBDRXNsN2Z2VkhOV1FTYW1QYWc0NEtPRWhiNkthanhHaFlVYzhNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665dadc4-c344-4d6f-9e62-eb34ec14824d", "record_id": "flaws_cloudtrail:0000091:665dadc4-c344-4d6f-9e62-eb34ec14824d", "row_index": 91, "timestamp": "2019-07-22T08:35:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665dadc4-c344-4d6f-9e62-eb34ec14824d", "eventTime": "2019-07-22T08:35:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNSlpIWFBlU1UxdExQc0F1bm9Qd1gxRWNZblk5ZnBhK2oyMENYZlF4Z242WEpJZGJNR01QR0tRU0gyNitEQnJtZ3RuaUlZTzZCd0tYZm9BWWxnenBHc21lWEQwOFJSYzBBT2g1SWFickxINENzWGFBb0wyZW5zU3NOeGlNb1ZvWmJrN0pGSWNPUzEreENxNEcxN1NJTVExLy9iZXZhMllpTXJQWWxxRkh5WmtFUWhldENaZDErTlNPVzZUWENCZmpNRHJFcC9DR0lXb2tyaENNeVRQVSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "record_id": "flaws_cloudtrail:0000092:3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "row_index": 92, "timestamp": "2019-07-22T08:35:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1102, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3faeb4c7-8abe-48d1-ba84-ae0f88c1e795", "eventTime": "2019-07-22T08:35:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVeGlBeStvbTN3VWppdEh5V1E5OXNJVFJyVkRzV1hQb1FSTXlGd0hBMzJROWhZdXFBOUVpVDUxTEwrM1k5L3RvM1VRa2FQOGtiODVCMmNmQ3dtaTI0NGoyWjdVSXBoYWh5eXBlT2FWQ0dQVXY0WkZqeW0yOWNIRVJNYStweVJsbDhjbDl6UE01MGgzMW90NXhTR1RRZVVuUjlQcmZRR3JWeVBwR0ZXOXlLRGZzQmZEQ2NzNmRVN2FKZXBDRXNsN2Z2VkhOV1FTYW1QYWc0NEtPRWhiNkthanhHaFlVYzhNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "record_id": "flaws_cloudtrail:0000093:ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "row_index": 93, "timestamp": "2019-07-22T08:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "eventTime": "2019-07-22T08:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoa3Bkc1NlaGt5Zm11Y2dleVM0WmZ4M1QvRjBjRGRyWFFrN1AvdW5OQlZOY09xM0FHazd4UVo2VkdQWk5lNjFxeEhoNlBlRlN3eWNZdHRjRFk1eXc3bmg2dXVuTDVLNFBzZjRCR3RITXpVSEJyQzMyVmtoeXNZVDVMQjY4YWx2dlhBTHZiZTRsR2E3MzlLTnJNTkdEbXZMMXNucE1hTDYvZVBKdjFWampTSVpQc0s5YXBXU2cwRE9EQUhQQ0RnL2JsUU9DcHhLYmtPVHhCWDdndzVoUCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "record_id": "flaws_cloudtrail:0000094:a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "row_index": 94, "timestamp": "2019-07-22T08:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "eventTime": "2019-07-22T08:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bTNzaWIrdkFvTlF4dEpOVEpvTTl0eElOdnVJc2ZVbS8vRjExenl2VDNDMmFVY2NDRnk5d1d5djFvVkJ1Q0wzSmJrMmZRVXBaY2JpSDgvZFhUVkVTckZGbmU3SHllWUF4bmJrSGpvZkV2UXoyVk5leWNQMzI3YlQwR3lIZjJ2MDVRZkpscUQwcHFtMlB3VFhYVmh6MFo2UGk5ZGVxLzBZeWJxbnQ3VFFTdnFhcHhRSGIvU1Rsb1V5ZnFtcU15RUtiR0xjbnVTY1hKSFI1MFdSVWg0QmEvQmVGY1FRWlRZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "record_id": "flaws_cloudtrail:0000095:ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "row_index": 95, "timestamp": "2019-07-22T08:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad48a9ec-9583-4c3f-9de5-1b120e7cd801", "eventTime": "2019-07-22T08:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoa3Bkc1NlaGt5Zm11Y2dleVM0WmZ4M1QvRjBjRGRyWFFrN1AvdW5OQlZOY09xM0FHazd4UVo2VkdQWk5lNjFxeEhoNlBlRlN3eWNZdHRjRFk1eXc3bmg2dXVuTDVLNFBzZjRCR3RITXpVSEJyQzMyVmtoeXNZVDVMQjY4YWx2dlhBTHZiZTRsR2E3MzlLTnJNTkdEbXZMMXNucE1hTDYvZVBKdjFWampTSVpQc0s5YXBXU2cwRE9EQUhQQ0RnL2JsUU9DcHhLYmtPVHhCWDdndzVoUCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "record_id": "flaws_cloudtrail:0000096:a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "row_index": 96, "timestamp": "2019-07-22T08:35:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53e3e26-9925-450a-ab9a-97e2b6f46f1c", "eventTime": "2019-07-22T08:35:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bTNzaWIrdkFvTlF4dEpOVEpvTTl0eElOdnVJc2ZVbS8vRjExenl2VDNDMmFVY2NDRnk5d1d5djFvVkJ1Q0wzSmJrMmZRVXBaY2JpSDgvZFhUVkVTckZGbmU3SHllWUF4bmJrSGpvZkV2UXoyVk5leWNQMzI3YlQwR3lIZjJ2MDVRZkpscUQwcHFtMlB3VFhYVmh6MFo2UGk5ZGVxLzBZeWJxbnQ3VFFTdnFhcHhRSGIvU1Rsb1V5ZnFtcU15RUtiR0xjbnVTY1hKSFI1MFdSVWg0QmEvQmVGY1FRWlRZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "record_id": "flaws_cloudtrail:0000097:91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "row_index": 97, "timestamp": "2019-07-22T08:35:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "eventTime": "2019-07-22T08:35:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNY01BY0Z5WUZRa3h2YUxnSlhOVGdhZE0wRkhtSm5jRmhJZ2lsNTArY3Z5ZGJ1ZWptNVlWNmhTdkxnS1RtMnVvQVBkMkt1Y095OHVyc3crWERpaFIyU1Q4clNpZzhvZGJKM2hHT0oweDVQamJ3UG8wajdEUGE0eVRHTzcvRTljcmo5N3RnMzlrWkJ3WDNMaDFaemVucC90L0VPc2locXB2SHdFQnQ0djkwcjhSTUF3QU9rd3JWSCt4K2pvNENFa3JlN1JXVDBCRVM2WVdRaW9LZXlnYXM0UmROSTArYkpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915d850c-ac7f-4216-a69b-d920ad490ab6", "record_id": "flaws_cloudtrail:0000098:915d850c-ac7f-4216-a69b-d920ad490ab6", "row_index": 98, "timestamp": "2019-07-22T08:35:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915d850c-ac7f-4216-a69b-d920ad490ab6", "eventTime": "2019-07-22T08:35:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmNzZMd0pnbDZxcmpkc0VFeURRSi93cWxQVTE2dm5EbllvSzR2UDVhdDJrNkFJa0tXL1NySGRSblhUb3dlcnRNSGdlSnR2RnJ3YWZRQys0UVpxaTQ2UjNHWk0wZ2l1eHdTZC92ckZqSCt4NitDN2owaEVjR1BWYWRKZ1c1MVZpVXRUdXAxQlFCUENYMzZDOVRYWGdFYXdyYUtVSEE3YTFJTHVrQlZWNHdhVjlPMm5SaEJ1bG82KzIwOHR0TTVxMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "record_id": "flaws_cloudtrail:0000099:91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "row_index": 99, "timestamp": "2019-07-22T08:35:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91fc8c9e-2888-43ba-ba5f-b6c7c61b1f42", "eventTime": "2019-07-22T08:35:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNY01BY0Z5WUZRa3h2YUxnSlhOVGdhZE0wRkhtSm5jRmhJZ2lsNTArY3Z5ZGJ1ZWptNVlWNmhTdkxnS1RtMnVvQVBkMkt1Y095OHVyc3crWERpaFIyU1Q4clNpZzhvZGJKM2hHT0oweDVQamJ3UG8wajdEUGE0eVRHTzcvRTljcmo5N3RnMzlrWkJ3WDNMaDFaemVucC90L0VPc2locXB2SHdFQnQ0djkwcjhSTUF3QU9rd3JWSCt4K2pvNENFa3JlN1JXVDBCRVM2WVdRaW9LZXlnYXM0UmROSTArYkpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915d850c-ac7f-4216-a69b-d920ad490ab6", "record_id": "flaws_cloudtrail:0000100:915d850c-ac7f-4216-a69b-d920ad490ab6", "row_index": 100, "timestamp": "2019-07-22T08:35:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915d850c-ac7f-4216-a69b-d920ad490ab6", "eventTime": "2019-07-22T08:35:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmNzZMd0pnbDZxcmpkc0VFeURRSi93cWxQVTE2dm5EbllvSzR2UDVhdDJrNkFJa0tXL1NySGRSblhUb3dlcnRNSGdlSnR2RnJ3YWZRQys0UVpxaTQ2UjNHWk0wZ2l1eHdTZC92ckZqSCt4NitDN2owaEVjR1BWYWRKZ1c1MVZpVXRUdXAxQlFCUENYMzZDOVRYWGdFYXdyYUtVSEE3YTFJTHVrQlZWNHdhVjlPMm5SaEJ1bG82KzIwOHR0TTVxMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efad900f-e7e4-452e-b17e-b8cb34aa7c75", "record_id": "flaws_cloudtrail:0000101:efad900f-e7e4-452e-b17e-b8cb34aa7c75", "row_index": 101, "timestamp": "2019-07-22T08:36:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efad900f-e7e4-452e-b17e-b8cb34aa7c75", "eventTime": "2019-07-22T08:36:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efad900f-e7e4-452e-b17e-b8cb34aa7c75", "record_id": "flaws_cloudtrail:0000102:efad900f-e7e4-452e-b17e-b8cb34aa7c75", "row_index": 102, "timestamp": "2019-07-22T08:36:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efad900f-e7e4-452e-b17e-b8cb34aa7c75", "eventTime": "2019-07-22T08:36:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d9f002-3473-407a-83c8-cf1ca370483", "record_id": "flaws_cloudtrail:0000103:d3d9f002-3473-407a-83c8-cf1ca370483", "row_index": 103, "timestamp": "2019-07-22T08:37:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d9f002-3473-407a-83c8-cf1ca370483", "eventTime": "2019-07-22T08:37:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d9f002-3473-407a-83c8-cf1ca370483", "record_id": "flaws_cloudtrail:0000104:d3d9f002-3473-407a-83c8-cf1ca370483", "row_index": 104, "timestamp": "2019-07-22T08:37:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d9f002-3473-407a-83c8-cf1ca370483", "eventTime": "2019-07-22T08:37:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "312862-c9e3-46e1-b902-e7add42e6683", "record_id": "flaws_cloudtrail:0000105:312862-c9e3-46e1-b902-e7add42e6683", "row_index": 105, "timestamp": "2019-07-22T08:37:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "312862-c9e3-46e1-b902-e7add42e6683", "eventTime": "2019-07-22T08:37:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "312862-c9e3-46e1-b902-e7add42e6683", "record_id": "flaws_cloudtrail:0000106:312862-c9e3-46e1-b902-e7add42e6683", "row_index": 106, "timestamp": "2019-07-22T08:37:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.255.242.117", "user_agent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "312862-c9e3-46e1-b902-e7add42e6683", "eventTime": "2019-07-22T08:37:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.255.242.117", "userAgent": "aws-cli/1.16.190 Python/3.7.4 Darwin/18.6.0 botocore/1.12.180", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b402934ad-3a5b-426e-8462-b022359f515315", "record_id": "flaws_cloudtrail:0000107:b402934ad-3a5b-426e-8462-b022359f515315", "row_index": 107, "timestamp": "2019-07-22T08:50:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b402934ad-3a5b-426e-8462-b022359f515315", "eventTime": "2019-07-22T08:50:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b402934ad-3a5b-426e-8462-b022359f515315", "record_id": "flaws_cloudtrail:0000108:b402934ad-3a5b-426e-8462-b022359f515315", "row_index": 108, "timestamp": "2019-07-22T08:50:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b402934ad-3a5b-426e-8462-b022359f515315", "eventTime": "2019-07-22T08:50:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f8f6881-c633-42af-a17b-f5b2c97134e4", "record_id": "flaws_cloudtrail:0000109:7f8f6881-c633-42af-a17b-f5b2c97134e4", "row_index": 109, "timestamp": "2019-07-22T09:09:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f8f6881-c633-42af-a17b-f5b2c97134e4", "eventTime": "2019-07-22T09:09:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f8f6881-c633-42af-a17b-f5b2c97134e4", "record_id": "flaws_cloudtrail:0000110:7f8f6881-c633-42af-a17b-f5b2c97134e4", "row_index": 110, "timestamp": "2019-07-22T09:09:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f8f6881-c633-42af-a17b-f5b2c97134e4", "eventTime": "2019-07-22T09:09:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "[aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "record_id": "flaws_cloudtrail:0000111:a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "row_index": 111, "timestamp": "2019-07-22T09:14:33Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "eventTime": "2019-07-22T09:14:33Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "record_id": "flaws_cloudtrail:0000112:a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "row_index": 112, "timestamp": "2019-07-22T09:14:33Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.4.226.241", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06ef4b5-165c-4f13-94ad-ac2ceb65a9ac", "eventTime": "2019-07-22T09:14:33Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.4.226.241", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e37f72-4149-4097-b027-dce88fd8746d", "record_id": "flaws_cloudtrail:0000113:87e37f72-4149-4097-b027-dce88fd8746d", "row_index": 113, "timestamp": "2019-07-22T09:25:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e37f72-4149-4097-b027-dce88fd8746d", "eventTime": "2019-07-22T09:25:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e37f72-4149-4097-b027-dce88fd8746d", "record_id": "flaws_cloudtrail:0000114:87e37f72-4149-4097-b027-dce88fd8746d", "row_index": 114, "timestamp": "2019-07-22T09:25:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e37f72-4149-4097-b027-dce88fd8746d", "eventTime": "2019-07-22T09:25:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c58df92d-7072-46aa-862f-fb81b408f419", "record_id": "flaws_cloudtrail:0000115:c58df92d-7072-46aa-862f-fb81b408f419", "row_index": 115, "timestamp": "2019-07-22T09:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c58df92d-7072-46aa-862f-fb81b408f419", "eventTime": "2019-07-22T09:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQK04I6EEA6OCZDN5", "expiration": "Jul 22, 2019 4:02:08 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c58df92d-7072-46aa-862f-fb81b408f419", "record_id": "flaws_cloudtrail:0000116:c58df92d-7072-46aa-862f-fb81b408f419", "row_index": 116, "timestamp": "2019-07-22T09:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c58df92d-7072-46aa-862f-fb81b408f419", "eventTime": "2019-07-22T09:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQK04I6EEA6OCZDN5", "expiration": "Jul 22, 2019 4:02:08 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532262-9ae8-45bc-8d7e-3160fb85a64a", "record_id": "flaws_cloudtrail:0000117:532262-9ae8-45bc-8d7e-3160fb85a64a", "row_index": 117, "timestamp": "2019-07-22T09:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532262-9ae8-45bc-8d7e-3160fb85a64a", "eventTime": "2019-07-22T09:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532262-9ae8-45bc-8d7e-3160fb85a64a", "record_id": "flaws_cloudtrail:0000118:532262-9ae8-45bc-8d7e-3160fb85a64a", "row_index": 118, "timestamp": "2019-07-22T09:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532262-9ae8-45bc-8d7e-3160fb85a64a", "eventTime": "2019-07-22T09:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97e01a0a-eb79-4c88-a679-b239711b89", "record_id": "flaws_cloudtrail:0000119:97e01a0a-eb79-4c88-a679-b239711b89", "row_index": 119, "timestamp": "2019-07-22T09:43:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97e01a0a-eb79-4c88-a679-b239711b89", "eventTime": "2019-07-22T09:43:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97e01a0a-eb79-4c88-a679-b239711b89", "record_id": "flaws_cloudtrail:0000120:97e01a0a-eb79-4c88-a679-b239711b89", "row_index": 120, "timestamp": "2019-07-22T09:43:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97e01a0a-eb79-4c88-a679-b239711b89", "eventTime": "2019-07-22T09:43:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982685bf3-d35e-4426-a4b6-bc62f2cf243b", "record_id": "flaws_cloudtrail:0000121:982685bf3-d35e-4426-a4b6-bc62f2cf243b", "row_index": 121, "timestamp": "2019-07-22T09:44:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982685bf3-d35e-4426-a4b6-bc62f2cf243b", "eventTime": "2019-07-22T09:44:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982685bf3-d35e-4426-a4b6-bc62f2cf243b", "record_id": "flaws_cloudtrail:0000122:982685bf3-d35e-4426-a4b6-bc62f2cf243b", "row_index": 122, "timestamp": "2019-07-22T09:44:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982685bf3-d35e-4426-a4b6-bc62f2cf243b", "eventTime": "2019-07-22T09:44:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "record_id": "flaws_cloudtrail:0000123:c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "row_index": 123, "timestamp": "2019-07-22T09:44:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "eventTime": "2019-07-22T09:44:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "record_id": "flaws_cloudtrail:0000124:c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "row_index": 124, "timestamp": "2019-07-22T09:44:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f7c2c8-7c9e-4eaa-869a-17cb0cdca361", "eventTime": "2019-07-22T09:44:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405b93ee-1084-416e-a18c-85ffcc0f8b4c", "record_id": "flaws_cloudtrail:0000125:405b93ee-1084-416e-a18c-85ffcc0f8b4c", "row_index": 125, "timestamp": "2019-07-22T09:44:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405b93ee-1084-416e-a18c-85ffcc0f8b4c", "eventTime": "2019-07-22T09:44:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "405b93ee-1084-416e-a18c-85ffcc0f8b4c", "record_id": "flaws_cloudtrail:0000126:405b93ee-1084-416e-a18c-85ffcc0f8b4c", "row_index": 126, "timestamp": "2019-07-22T09:44:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "405b93ee-1084-416e-a18c-85ffcc0f8b4c", "eventTime": "2019-07-22T09:44:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "117a735e-f1e3-4deb-a100-1dd43db841225", "record_id": "flaws_cloudtrail:0000127:117a735e-f1e3-4deb-a100-1dd43db841225", "row_index": 127, "timestamp": "2019-07-22T09:44:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "117a735e-f1e3-4deb-a100-1dd43db841225", "eventTime": "2019-07-22T09:44:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "117a735e-f1e3-4deb-a100-1dd43db841225", "record_id": "flaws_cloudtrail:0000128:117a735e-f1e3-4deb-a100-1dd43db841225", "row_index": 128, "timestamp": "2019-07-22T09:44:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "117a735e-f1e3-4deb-a100-1dd43db841225", "eventTime": "2019-07-22T09:44:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e5e991-034a-4e44-a684-e5375f5cf260", "record_id": "flaws_cloudtrail:0000129:d5e5e991-034a-4e44-a684-e5375f5cf260", "row_index": 129, "timestamp": "2019-07-22T09:46:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e5e991-034a-4e44-a684-e5375f5cf260", "eventTime": "2019-07-22T09:46:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e5e991-034a-4e44-a684-e5375f5cf260", "record_id": "flaws_cloudtrail:0000130:d5e5e991-034a-4e44-a684-e5375f5cf260", "row_index": 130, "timestamp": "2019-07-22T09:46:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "236.3.4.204", "user_agent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e5e991-034a-4e44-a684-e5375f5cf260", "eventTime": "2019-07-22T09:46:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "236.3.4.204", "userAgent": "[aws-cli/1.16.81 Python/3.7.3 Linux/5.0.0-21-generic botocore/1.12.71]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c0b84d7-885f-4f79-b403-82cceff42ce0", "record_id": "flaws_cloudtrail:0000131:3c0b84d7-885f-4f79-b403-82cceff42ce0", "row_index": 131, "timestamp": "2019-07-22T10:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c0b84d7-885f-4f79-b403-82cceff42ce0", "eventTime": "2019-07-22T10:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1WO3WJKMB5X7YP1P", "expiration": "Jul 22, 2019 5:03:24 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFMaCXVzLXdlc3QtMiJHMEUCIQDxpZsIVMqpWSXoc5HfYqGyfShOlQR72AkEYeAY0l2ZEgIgHcZnrP6QzIKe4vMVa1GR0IujkdTo3lIKkuPCnbelNh4q4wMIvP//////////ARAAGgw5NzU0MjYyNjIwMjkiDLklMWw0dUlVXBlKcSq3A7GuKSwy3xosTUknRM2Sw78fBjb6ZYFuRK6dBPkZemVjroCiyfmALTcCALikNuQxkdbsCmvlXUoHkzj/Po3VbEQNOZOjQ48GzII2jMfvKWD1tRCVK216rhCzuLtAinAuCwRhRL+O0LogynIawBpbXtBcgacaArouAVVDG2EYyrgNOsTz5EoseIgZPffheptVTmEe4YEj56uH+R9nOXg6uFXkRfCNmrxeRuE1t+g8T7SyPqN1Cj+avBaZ5If6SOh4HMxJBh2o6aQME45hszaKOhrfKZWvqyqqYlL9IKAEbQb0NGjKNNycbK+9zOdBdJ8b1O73AIremUaZ/7el0oV3YkBErHb4EBfiPd+U9X9G2SdAGGQdqHr2HRHSN87XT2p1ECfrhYpvtHhRW8EfyJHap1T7gtMvpetHFnqqYqs7UIrU8bK/4mZioNpncMzaM5H3XI5grmYFDZbR6gHOGjAtBwsrTjbk0EgdII/KbslVdmuWfkZ+6kKSk32isaEBX6+zqQvcPfuEInLhutW3G5RIRjPmeqltRNXi7lWw4yR2mEj+Oqh4CQr0mpqeFaMnyPR1jxu/N5J7kDEw+qDW6QU6tAGdVNGgfmDo5RUebeqg6FS/FnVUzluBJleXP3FusXI+9GRWNONrEQIbG3nifT+BKQp2f/jZCSYpensFGp+5iGG1cuBFZas3yLjVyfcfsp3nl/uFyuATBRHmFFlFw0bHhaaebPnIH1Q/CPsfJUKxKzz9gZebBv3nbrzTGWpkrRYlROSifAruWGvo/EYlwkMQlMG3M0NiF3QPYtd3bzVuHXDfS3A4NQCcx8T1ZrnMlb08FXczdzo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c0b84d7-885f-4f79-b403-82cceff42ce0", "record_id": "flaws_cloudtrail:0000132:3c0b84d7-885f-4f79-b403-82cceff42ce0", "row_index": 132, "timestamp": "2019-07-22T10:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c0b84d7-885f-4f79-b403-82cceff42ce0", "eventTime": "2019-07-22T10:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1WO3WJKMB5X7YP1P", "expiration": "Jul 22, 2019 5:03:24 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c79a8bf3-792c-4394-8071-8cb47d9c3845", "record_id": "flaws_cloudtrail:0000133:c79a8bf3-792c-4394-8071-8cb47d9c3845", "row_index": 133, "timestamp": "2019-07-22T11:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c79a8bf3-792c-4394-8071-8cb47d9c3845", "eventTime": "2019-07-22T11:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALVOBO8LMK4F81B2L", "expiration": "Jul 22, 2019 5:41:12 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c79a8bf3-792c-4394-8071-8cb47d9c3845", "record_id": "flaws_cloudtrail:0000134:c79a8bf3-792c-4394-8071-8cb47d9c3845", "row_index": 134, "timestamp": "2019-07-22T11:31:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c79a8bf3-792c-4394-8071-8cb47d9c3845", "eventTime": "2019-07-22T11:31:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALVOBO8LMK4F81B2L", "expiration": "Jul 22, 2019 5:41:12 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFQaCXVzLXdlc3QtMiJIMEYCIQCrwlGehaXnVFYXvN4WCb93qRWCRJ+uf+rDreuDYRbxRQIhAIqcRQb5KQuB8eE9D/txaM6WZSSGw28dBjVUknTGQD/cKuMDCL3//////////wEQABoMOTc1NDI2MjYyMDI5IgyTwXBik7NXVer3uO0qtwNFRvLg6HhlskDYAGUbdXLOsuFXfcF0Uic7P7z9bNYZTZBAY0ThPc03kD2/W/ZMQZXReIeWkSAg7zfeT2LeMHw51w64Y0ik+beEEw3vNIHEurjp0rTE7YB52A5aCGZFCAO1hSPXLUVZXrI2X1HAmnnnKlePR64cGdopYjtb9dMkrCnZK+5KqEEz7kW13PYnfQFDK9bRU2Hsk/89DoTMaGOmm4Y5KXT4E93bz3DSLxWSVDr7u2dyWHGAgTKqy0eG6PQkO0L8KeBiNFZv0L8+WBoAG+zZ2AVp57k5F8qge5wGaRLS/qKCVCi7vQopovGxKaw+oyO2+cu5dS2DdTDBhVJ7WpVK156oouPAOq2jFSiZzqUnkwEoeYHoyDGydTFNCNVeQZ7bejZfv3OE56T/o5itsV0V9J0y2SodeOLyDK7Jw1g/ZbsW6wLP42y+4Ut3fjALosVXoT6OW1JM/v13jvkLKBSx5L3VlzWUZ6XMyxz3LQwI9lHjhvzB5tjooi+WI7fJ+i4bTeRmexKG+NO7dM+RG3I/gpwkmEE1D1DHpS0pmu4xUibaejZ7AF9/IwFHA7VFByK3SmglMIm91ukFOrMBp9ZRxUMnkZUkCommyEiji9H5f/ivOLLfMDvwo+W/5wH14twUK0HbZHMSEUddK8GS3Z3JKRsmsyAzwT8Ejwy/dgrWk17wiyA1AyF2igvL2m8r69RyHUVAWAjNgUJzIOlS7yC9hXETbwtrmUeSiLw3a/CWNdgkbKFvcdgIY8udRvSzIIoOTopJxKcjCxJBVV3qNPogdHJuShvyg1FCrB4AMxhrGgu/TK+XFf9w+Ik43JtTvjE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "record_id": "flaws_cloudtrail:0000135:7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "row_index": 135, "timestamp": "2019-07-22T11:39:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "eventTime": "2019-07-22T11:39:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "record_id": "flaws_cloudtrail:0000136:7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "row_index": 136, "timestamp": "2019-07-22T11:39:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7551ba-f4ed-4b47-a97a-0ad3ec184159", "eventTime": "2019-07-22T11:39:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "record_id": "flaws_cloudtrail:0000137:b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "row_index": 137, "timestamp": "2019-07-22T11:42:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "eventTime": "2019-07-22T11:42:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxItems": 10}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "record_id": "flaws_cloudtrail:0000138:2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "row_index": 138, "timestamp": "2019-07-22T11:42:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "eventTime": "2019-07-22T11:42:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "record_id": "flaws_cloudtrail:0000139:b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "row_index": 139, "timestamp": "2019-07-22T11:42:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3afbc6a-aa8d-446c-a0f9-38e88bfc629d", "eventTime": "2019-07-22T11:42:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxItems": 10}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "record_id": "flaws_cloudtrail:0000140:2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "row_index": 140, "timestamp": "2019-07-22T11:42:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.7.251.207", "user_agent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a2f72bf-df9c-4fec-b4f1-a16d1148ab1c", "eventTime": "2019-07-22T11:42:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.7.251.207", "userAgent": "Boto3/1.9.152 Python/3.6.8 Linux/4.15.0-54-generic Botocore/1.12.152", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b0abeb-b8e3-469f-b501-c0e95ce1431b", "record_id": "flaws_cloudtrail:0000141:50b0abeb-b8e3-469f-b501-c0e95ce1431b", "row_index": 141, "timestamp": "2019-07-22T11:42:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b0abeb-b8e3-469f-b501-c0e95ce1431b", "eventTime": "2019-07-22T11:42:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b0abeb-b8e3-469f-b501-c0e95ce1431b", "record_id": "flaws_cloudtrail:0000142:50b0abeb-b8e3-469f-b501-c0e95ce1431b", "row_index": 142, "timestamp": "2019-07-22T11:42:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b0abeb-b8e3-469f-b501-c0e95ce1431b", "eventTime": "2019-07-22T11:42:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b84daf4-58b2-4404-8970-e742fdd93b4d", "record_id": "flaws_cloudtrail:0000143:0b84daf4-58b2-4404-8970-e742fdd93b4d", "row_index": 143, "timestamp": "2019-07-22T11:44:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b84daf4-58b2-4404-8970-e742fdd93b4d", "eventTime": "2019-07-22T11:44:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b84daf4-58b2-4404-8970-e742fdd93b4d", "record_id": "flaws_cloudtrail:0000144:0b84daf4-58b2-4404-8970-e742fdd93b4d", "row_index": 144, "timestamp": "2019-07-22T11:44:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b84daf4-58b2-4404-8970-e742fdd93b4d", "eventTime": "2019-07-22T11:44:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62498e8-d68d-4b3d-9cad-f49e8d81ae94", "record_id": "flaws_cloudtrail:0000145:62498e8-d68d-4b3d-9cad-f49e8d81ae94", "row_index": 145, "timestamp": "2019-07-22T12:22:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62498e8-d68d-4b3d-9cad-f49e8d81ae94", "eventTime": "2019-07-22T12:22:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPTPRKN98U10SW2UB", "expiration": "Jul 22, 2019 1:22:36 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62498e8-d68d-4b3d-9cad-f49e8d81ae94", "record_id": "flaws_cloudtrail:0000146:62498e8-d68d-4b3d-9cad-f49e8d81ae94", "row_index": 146, "timestamp": "2019-07-22T12:22:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62498e8-d68d-4b3d-9cad-f49e8d81ae94", "eventTime": "2019-07-22T12:22:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPTPRKN98U10SW2UB", "expiration": "Jul 22, 2019 1:22:36 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFUaCXVzLXdlc3QtMiJGMEQCIHn4s3hb0LF2bTIwUV7drNK0D0YCPb+T/qap0y2vyneNAiBH8XLmOwHgznjDeQ7uw/XvCw3Vndm4p1rCl4R70AY6byrxAgi+//////////8BEAAaDDk3NTQyNjI2MjAyOSIM6+Dd6URSxrfb4u0KKsUCNAPP95GIb9+AHQyvDep33BCvEKjd1ZlptkLYH720WQJHPc6DnjScZ/0aDvmQFXpaB+JZJ20QOPpiXUVrmp2XOx2SKtHnubPcIcpfWURwAjkvWl5ol1VbqAX81nbb8VMMoAlpT7ks6H9w8Pc3iyBCVjlYqOHx7sdvZs6/P4PeHoz795byvDQX1nkxaWAj9j/0dRreCDf9xmeHhn0eW3/h9scVrjNHJHkKyW4eAXxpeiKgNEMGhUYrQe0Zo69s+rLybsLMQW6oURwfF3Z0AbWjOpv6rGtEcsxVRC/xfbvlR81bp84Xmz3v91pHehMr0kPsp34ZOF0OOJU7WG2q1LuK0Nj2Hh7PsvfZcpFU0zohty6a5YhAHP8mKOZWrjQksQM8z0viZfLYuK+W98esT1o/Om1n3TWXRkhYSxuW9yKVVg8UfjKEuDCM1dbpBTq1AQfqZE1OYad2Xg7hoPP5FDf7MAADassYcNPMA1Kpd6dW24g1xbL8v43fkpg8CIB23nu61bN8lEwJmKa/IvbmVHGKTgHy5kKJJ9iXcvx+kTX3UsXL7Um47q+hmp6D4n3aGdwAahe0veOdzTizuUKxl9ybZtoqwCymo1IVz6iIdjxGZbfsKjQDN6yjjDh7U0boiru0xAYxj2QYT3t/vHmr3BQPl6lk1oQZZ/BixTv0z0sFoHBXF1E="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "record_id": "flaws_cloudtrail:0000147:bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "row_index": 147, "timestamp": "2019-07-22T12:28:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "eventTime": "2019-07-22T12:28:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "record_id": "flaws_cloudtrail:0000148:bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "row_index": 148, "timestamp": "2019-07-22T12:28:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.195.8.61", "user_agent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd597ce6-5c47-477e-9491-cdfb6e7e6fa0", "eventTime": "2019-07-22T12:28:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.195.8.61", "userAgent": "[aws-cli/1.16.166 Python/3.6.8 Linux/4.19.0-kali3-amd64 botocore/1.12.156]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c276059fa-4f41-46d3-8219-8783b17841e0", "record_id": "flaws_cloudtrail:0000149:c276059fa-4f41-46d3-8219-8783b17841e0", "row_index": 149, "timestamp": "2019-07-22T12:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c276059fa-4f41-46d3-8219-8783b17841e0", "eventTime": "2019-07-22T12:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOAFRRGU010ZT75CK", "expiration": "Jul 22, 2019 6:34:43 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c276059fa-4f41-46d3-8219-8783b17841e0", "record_id": "flaws_cloudtrail:0000150:c276059fa-4f41-46d3-8219-8783b17841e0", "row_index": 150, "timestamp": "2019-07-22T12:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c276059fa-4f41-46d3-8219-8783b17841e0", "eventTime": "2019-07-22T12:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOAFRRGU010ZT75CK", "expiration": "Jul 22, 2019 6:34:43 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab17e300-3766-4815-9677-999508dae575", "record_id": "flaws_cloudtrail:0000151:ab17e300-3766-4815-9677-999508dae575", "row_index": 151, "timestamp": "2019-07-22T13:03:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-88"], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab17e300-3766-4815-9677-999508dae575", "eventTime": "2019-07-22T13:03:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-88", "roleSessionName": "reader-5153"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-88"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c14c7272-e2b1-4e52-9a5f-14a7a20bc861", "record_id": "flaws_cloudtrail:0000152:c14c7272-e2b1-4e52-9a5f-14a7a20bc861", "row_index": 152, "timestamp": "2019-07-22T13:04:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 524, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c14c7272-e2b1-4e52-9a5f-14a7a20bc861", "eventTime": "2019-07-22T13:04:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0758c334-1c67-453b-a0a4-0fb98f55aba0", "record_id": "flaws_cloudtrail:0000153:0758c334-1c67-453b-a0a4-0fb98f55aba0", "row_index": 153, "timestamp": "2019-07-22T13:05:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0758c334-1c67-453b-a0a4-0fb98f55aba0", "eventTime": "2019-07-22T13:05:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae65b32f-7f6c-4e7f-b030-ad5ff6455f8f", "record_id": "flaws_cloudtrail:0000154:ae65b32f-7f6c-4e7f-b030-ad5ff6455f8f", "row_index": 154, "timestamp": "2019-07-22T13:06:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291-archive"], "raw_record_size_bytes": 645, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae65b32f-7f6c-4e7f-b030-ad5ff6455f8f", "eventTime": "2019-07-22T13:06:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37cc6079-e4a1-49f5-b359-4c36fb9fc4d7", "record_id": "flaws_cloudtrail:0000155:37cc6079-e4a1-49f5-b359-4c36fb9fc4d7", "row_index": 155, "timestamp": "2019-07-22T13:08:43Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 649, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37cc6079-e4a1-49f5-b359-4c36fb9fc4d7", "eventTime": "2019-07-22T13:08:43Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8ea1ba-48f2-4bab-a766-7c2c289bcd6f", "record_id": "flaws_cloudtrail:0000156:ee8ea1ba-48f2-4bab-a766-7c2c289bcd6f", "row_index": 156, "timestamp": "2019-07-22T13:12:23Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8ea1ba-48f2-4bab-a766-7c2c289bcd6f", "eventTime": "2019-07-22T13:12:23Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "key": "customer/03398.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3c89f9a-9409-4136-8352-c5be0a551291", "record_id": "flaws_cloudtrail:0000157:a3c89f9a-9409-4136-8352-c5be0a551291", "row_index": 157, "timestamp": "2019-07-22T13:12:45Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3c89f9a-9409-4136-8352-c5be0a551291", "eventTime": "2019-07-22T13:12:45Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "key": "customer/02090.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95569653-507d-463d-b9ba-b2a6d4acb701", "record_id": "flaws_cloudtrail:0000158:95569653-507d-463d-b9ba-b2a6d4acb701", "row_index": 158, "timestamp": "2019-07-22T13:13:44Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95569653-507d-463d-b9ba-b2a6d4acb701", "eventTime": "2019-07-22T13:13:44Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "key": "customer/07604.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6300eb41-e6f4-4f75-b5cb-40e1d41b4f19", "record_id": "flaws_cloudtrail:0000159:6300eb41-e6f4-4f75-b5cb-40e1d41b4f19", "row_index": 159, "timestamp": "2019-07-22T13:14:08Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6300eb41-e6f4-4f75-b5cb-40e1d41b4f19", "eventTime": "2019-07-22T13:14:08Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "key": "customer/06390.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779e6d02-9a46-421e-b38e-da3c71d69a42", "record_id": "flaws_cloudtrail:0000160:779e6d02-9a46-421e-b38e-da3c71d69a42", "row_index": 160, "timestamp": "2019-07-22T13:14:44Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYLRS22MDEN258LYV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "117.106.165.164", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-5291"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779e6d02-9a46-421e-b38e-da3c71d69a42", "eventTime": "2019-07-22T13:14:44Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "117.106.165.164", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYLRS22MDEN258LYV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5291", "key": "customer/03519.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5291"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291a4949-2f07-4a72-8599-02b1abe5c1ed", "record_id": "flaws_cloudtrail:0000161:291a4949-2f07-4a72-8599-02b1abe5c1ed", "row_index": 161, "timestamp": "2019-07-22T13:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291a4949-2f07-4a72-8599-02b1abe5c1ed", "eventTime": "2019-07-22T13:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB7E6E1SC1QY05T7R", "expiration": "Jul 22, 2019 7:42:41 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "291a4949-2f07-4a72-8599-02b1abe5c1ed", "record_id": "flaws_cloudtrail:0000162:291a4949-2f07-4a72-8599-02b1abe5c1ed", "row_index": 162, "timestamp": "2019-07-22T13:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "291a4949-2f07-4a72-8599-02b1abe5c1ed", "eventTime": "2019-07-22T13:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB7E6E1SC1QY05T7R", "expiration": "Jul 22, 2019 7:42:41 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFYaCXVzLXdlc3QtMiJGMEQCIGvkVgZY9iGHVMjrZmQJCGbnc/ZLvU0GknBFcgZ//UAZAiAMgVupVAKt62dyrx1L7U/DMyhQvgudchSGylh8b77eJyrjAwi///////////8BEAAaDDk3NTQyNjI2MjAyOSIMFiOitDTmffG48k2yKrcDSycf2SPKtTn0kM+pjVe0QZ8mLIXLu1g6SzwjiWBrldBRn9KXPLZ2VrCXnTzGUxB2k4kd545GL2Ds+udS2TgPCUa4768vpCVBhgbocsx6xtQqs+RpGipwQ2I3p+bk/OoNy7NINs/0W2FTfCrndLxK15+O5O7kQZ/xRtk+5hf1Nhua9WaKEw/NaLddBfWf1wDAq305Tdiw9poEKAGJr5zl8T646Xi/I3eCEyuU0kDaX3rXL1JXbocfhweFQV9qzH/sgvU5ZGfykVLykIKHWh+dUhJetbuaMiD3MkVbkYxbdYs4zsAkS6YZutkTedOfyIuhY5brF4JOKkib/at6FFKDgty99Nda3kCR1kveIbVQyYRZVxkXxp1ub1DNGj1rJy7bjOWewgvJdAgZtlJ0ZP+1JZDJz6SuiB+UP7P7XMBHh0Q36HsezSQMaxKuQU+7veSSi2CfVT+aHC88jme3OFWhxO6kMZASk2it28p3LYcKxL4fkhTMgrGJT9xLdtGiznRCnpKcT7Z5rvFnN8GuEage4jjcFRIQMAN/YyqUCMf/Eq0myBvJUtR/+RDoFvacTOFf8IC60g8JLjCq9dbpBTq1AQ8QIjAILHNfX6qJBh8tK4c72s8sBOi9Kqy+LKs1oFS8zr7hiTJ3g14v2Dgh3TXYh4W5whT0K2jYqEsQQ2sLPvFTZm1rUeTFT84wxuPi1l0PE+ifoJhwX2ZWhUq2BUdvRmi0rvkOq79Q/L8LhdBh/4YsGByaIpdyvXBtc7vxypVfJGEQ5Nx/9uzaCaD4xSOApKy89bG9CKo8FEKAySYw791uJO3gYoASGWPL3B0lc7YuSSPhnYw="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "919f2cde-b26d-4fe9-be83-68e3fe041519", "record_id": "flaws_cloudtrail:0000163:919f2cde-b26d-4fe9-be83-68e3fe041519", "row_index": 163, "timestamp": "2019-07-22T13:41:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "919f2cde-b26d-4fe9-be83-68e3fe041519", "eventTime": "2019-07-22T13:41:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "919f2cde-b26d-4fe9-be83-68e3fe041519", "record_id": "flaws_cloudtrail:0000164:919f2cde-b26d-4fe9-be83-68e3fe041519", "row_index": 164, "timestamp": "2019-07-22T13:41:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "919f2cde-b26d-4fe9-be83-68e3fe041519", "eventTime": "2019-07-22T13:41:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a44736-dad1-4ded-9a91-1ab97a5810cd", "record_id": "flaws_cloudtrail:0000165:0a44736-dad1-4ded-9a91-1ab97a5810cd", "row_index": 165, "timestamp": "2019-07-22T13:41:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a44736-dad1-4ded-9a91-1ab97a5810cd", "eventTime": "2019-07-22T13:41:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a44736-dad1-4ded-9a91-1ab97a5810cd", "record_id": "flaws_cloudtrail:0000166:0a44736-dad1-4ded-9a91-1ab97a5810cd", "row_index": 166, "timestamp": "2019-07-22T13:41:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a44736-dad1-4ded-9a91-1ab97a5810cd", "eventTime": "2019-07-22T13:41:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273a6d9c-b69f-4526-8b57-f989c8d14299", "record_id": "flaws_cloudtrail:0000167:273a6d9c-b69f-4526-8b57-f989c8d14299", "row_index": 167, "timestamp": "2019-07-22T13:44:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "[aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273a6d9c-b69f-4526-8b57-f989c8d14299", "eventTime": "2019-07-22T13:44:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "[aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273a6d9c-b69f-4526-8b57-f989c8d14299", "record_id": "flaws_cloudtrail:0000168:273a6d9c-b69f-4526-8b57-f989c8d14299", "row_index": 168, "timestamp": "2019-07-22T13:44:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "[aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273a6d9c-b69f-4526-8b57-f989c8d14299", "eventTime": "2019-07-22T13:44:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "[aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16831-ed63-4297-a1ea-bb10cb652fb9", "record_id": "flaws_cloudtrail:0000169:16831-ed63-4297-a1ea-bb10cb652fb9", "row_index": 169, "timestamp": "2019-07-22T14:04:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16831-ed63-4297-a1ea-bb10cb652fb9", "eventTime": "2019-07-22T14:04:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16831-ed63-4297-a1ea-bb10cb652fb9", "record_id": "flaws_cloudtrail:0000170:16831-ed63-4297-a1ea-bb10cb652fb9", "row_index": 170, "timestamp": "2019-07-22T14:04:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16831-ed63-4297-a1ea-bb10cb652fb9", "eventTime": "2019-07-22T14:04:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "record_id": "flaws_cloudtrail:0000171:6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "row_index": 171, "timestamp": "2019-07-22T14:05:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "eventTime": "2019-07-22T14:05:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "record_id": "flaws_cloudtrail:0000172:6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "row_index": 172, "timestamp": "2019-07-22T14:05:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac5ed46-da1c-43bb-a65c-7e780d836eb1", "eventTime": "2019-07-22T14:05:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "record_id": "flaws_cloudtrail:0000173:9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "row_index": 173, "timestamp": "2019-07-22T14:05:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "eventTime": "2019-07-22T14:05:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "record_id": "flaws_cloudtrail:0000174:9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "row_index": 174, "timestamp": "2019-07-22T14:05:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9734eca7-fd52-4fd2-8998-0d3e8fd9cfc4", "eventTime": "2019-07-22T14:05:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "record_id": "flaws_cloudtrail:0000175:4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "row_index": 175, "timestamp": "2019-07-22T14:05:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "eventTime": "2019-07-22T14:05:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYTzRTQ2dyYnlCS0MxNFRjc29KbFNQMmdDRTV6Nk5yY01BbVYwajR6a013QVE5eksxMExHeFR6TTFWR2NUYkNyaGdhVnozbDNCcWdYRW9Ld3hnV3Rrb2RieFJFeFRDeXRTMngxSmtQY0MrVUxhS0Z0YURxL1FNQy9GbGp2aHZ3dS92TmN5VGtMRFhLUzhmMHk1YTZKZ1hwVjA0QWRFSnFTN2hzZTJreGlkVTlJMzJzeE5ZV0FIaWszQlUyWlAvODA5a09TZElyMkxnSzJaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "record_id": "flaws_cloudtrail:0000176:4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "row_index": 176, "timestamp": "2019-07-22T14:05:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7e1fce-ea6d-4fd7-93dd-ab7543517a20", "eventTime": "2019-07-22T14:05:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYTzRTQ2dyYnlCS0MxNFRjc29KbFNQMmdDRTV6Nk5yY01BbVYwajR6a013QVE5eksxMExHeFR6TTFWR2NUYkNyaGdhVnozbDNCcWdYRW9Ld3hnV3Rrb2RieFJFeFRDeXRTMngxSmtQY0MrVUxhS0Z0YURxL1FNQy9GbGp2aHZ3dS92TmN5VGtMRFhLUzhmMHk1YTZKZ1hwVjA0QWRFSnFTN2hzZTJreGlkVTlJMzJzeE5ZV0FIaWszQlUyWlAvODA5a09TZElyMkxnSzJaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa304714b-4822-4e14-88c1-d1e9feb1f358", "record_id": "flaws_cloudtrail:0000177:fa304714b-4822-4e14-88c1-d1e9feb1f358", "row_index": 177, "timestamp": "2019-07-22T14:05:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa304714b-4822-4e14-88c1-d1e9feb1f358", "eventTime": "2019-07-22T14:05:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINWVBQjhUVCtnUGE1NUo4WjhMQWR2MFE3ajBsczMwN2RoSTBHYkR3YlUreWViNVV4TEtZZnEybGtjVWVXQys3bjh4OGdQaHZvTmZmcXJ5MnhWM1B6OWM5SUtOM0VxQW5CdklyWm02K2Q0MlNhSG9JVXNrelRaVlBJaTZqZHQ5UU4vME5EajZiOTZjRWtGMlJtZmwxMm45NFVtVjVTekRvVldsMFlJRENpUnZVMFZESHFJZElMZHc2RzVMN0dwdEJFeFlsTisrcCtDSnNDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa304714b-4822-4e14-88c1-d1e9feb1f358", "record_id": "flaws_cloudtrail:0000178:fa304714b-4822-4e14-88c1-d1e9feb1f358", "row_index": 178, "timestamp": "2019-07-22T14:05:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.17.252.83", "user_agent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa304714b-4822-4e14-88c1-d1e9feb1f358", "eventTime": "2019-07-22T14:05:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.17.252.83", "userAgent": "aws-cli/1.16.202 Python/2.7.15rc1 Linux/4.4.0-53329-Microsoft botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJINWVBQjhUVCtnUGE1NUo4WjhMQWR2MFE3ajBsczMwN2RoSTBHYkR3YlUreWViNVV4TEtZZnEybGtjVWVXQys3bjh4OGdQaHZvTmZmcXJ5MnhWM1B6OWM5SUtOM0VxQW5CdklyWm02K2Q0MlNhSG9JVXNrelRaVlBJaTZqZHQ5UU4vME5EajZiOTZjRWtGMlJtZmwxMm45NFVtVjVTekRvVldsMFlJRENpUnZVMFZESHFJZElMZHc2RzVMN0dwdEJFeFlsTisrcCtDSnNDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "record_id": "flaws_cloudtrail:0000179:5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "row_index": 179, "timestamp": "2019-07-22T14:10:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "eventTime": "2019-07-22T14:10:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANCYTRMGSRQC7ROCW", "expiration": "Jul 23, 2019 2:10:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a540364-6b2e-43bb-a77e-901512556e23", "record_id": "flaws_cloudtrail:0000180:08a540364-6b2e-43bb-a77e-901512556e23", "row_index": 180, "timestamp": "2019-07-22T14:10:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a540364-6b2e-43bb-a77e-901512556e23", "eventTime": "2019-07-22T14:10:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL9SB4A8NOU53VYQM", "expiration": "Jul 23, 2019 2:10:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd312fa-8300-4157-8d49-0ed90af07f78", "record_id": "flaws_cloudtrail:0000181:0dd312fa-8300-4157-8d49-0ed90af07f78", "row_index": 181, "timestamp": "2019-07-22T14:10:03Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "9.1.209.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd312fa-8300-4157-8d49-0ed90af07f78", "eventTime": "2019-07-22T14:10:03Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.1.209.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]efc9568ca1d2302c4158a3ef68df1bcf"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "record_id": "flaws_cloudtrail:0000182:5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "row_index": 182, "timestamp": "2019-07-22T14:10:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac34b89-8a29-4a43-a247-1e9bcba2dd46", "eventTime": "2019-07-22T14:10:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANCYTRMGSRQC7ROCW", "expiration": "Jul 23, 2019 2:10:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a540364-6b2e-43bb-a77e-901512556e23", "record_id": "flaws_cloudtrail:0000183:08a540364-6b2e-43bb-a77e-901512556e23", "row_index": 183, "timestamp": "2019-07-22T14:10:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a540364-6b2e-43bb-a77e-901512556e23", "eventTime": "2019-07-22T14:10:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL9SB4A8NOU53VYQM", "expiration": "Jul 23, 2019 2:10:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd312fa-8300-4157-8d49-0ed90af07f78", "record_id": "flaws_cloudtrail:0000184:0dd312fa-8300-4157-8d49-0ed90af07f78", "row_index": 184, "timestamp": "2019-07-22T14:10:03Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "9.1.209.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd312fa-8300-4157-8d49-0ed90af07f78", "eventTime": "2019-07-22T14:10:03Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.1.209.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]efc9568ca1d2302c4158a3ef68df1bcf"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1714c313-6027-4633-9fcd-6c83ae8194b5", "record_id": "flaws_cloudtrail:0000185:1714c313-6027-4633-9fcd-6c83ae8194b5", "row_index": 185, "timestamp": "2019-07-22T14:28:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1714c313-6027-4633-9fcd-6c83ae8194b5", "eventTime": "2019-07-22T14:28:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1714c313-6027-4633-9fcd-6c83ae8194b5", "record_id": "flaws_cloudtrail:0000186:1714c313-6027-4633-9fcd-6c83ae8194b5", "row_index": 186, "timestamp": "2019-07-22T14:28:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1714c313-6027-4633-9fcd-6c83ae8194b5", "eventTime": "2019-07-22T14:28:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eb7943f-b241-4694-af8d-674ed14ae137", "record_id": "flaws_cloudtrail:0000187:2eb7943f-b241-4694-af8d-674ed14ae137", "row_index": 187, "timestamp": "2019-07-22T14:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eb7943f-b241-4694-af8d-674ed14ae137", "eventTime": "2019-07-22T14:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eb7943f-b241-4694-af8d-674ed14ae137", "record_id": "flaws_cloudtrail:0000188:2eb7943f-b241-4694-af8d-674ed14ae137", "row_index": 188, "timestamp": "2019-07-22T14:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eb7943f-b241-4694-af8d-674ed14ae137", "eventTime": "2019-07-22T14:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44da1d2f-a2b2-4227-8908-3b66ce83348c", "record_id": "flaws_cloudtrail:0000189:44da1d2f-a2b2-4227-8908-3b66ce83348c", "row_index": 189, "timestamp": "2019-07-22T14:30:33Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44da1d2f-a2b2-4227-8908-3b66ce83348c", "eventTime": "2019-07-22T14:30:33Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44da1d2f-a2b2-4227-8908-3b66ce83348c", "record_id": "flaws_cloudtrail:0000190:44da1d2f-a2b2-4227-8908-3b66ce83348c", "row_index": 190, "timestamp": "2019-07-22T14:30:33Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44da1d2f-a2b2-4227-8908-3b66ce83348c", "eventTime": "2019-07-22T14:30:33Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4d740179-0059-4948-83e1-e4c7b758565", "record_id": "flaws_cloudtrail:0000191:b4d740179-0059-4948-83e1-e4c7b758565", "row_index": 191, "timestamp": "2019-07-22T14:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4d740179-0059-4948-83e1-e4c7b758565", "eventTime": "2019-07-22T14:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVG0ZBZP06HF5OG7", "expiration": "Jul 22, 2019 8:39:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4d740179-0059-4948-83e1-e4c7b758565", "record_id": "flaws_cloudtrail:0000192:b4d740179-0059-4948-83e1-e4c7b758565", "row_index": 192, "timestamp": "2019-07-22T14:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4d740179-0059-4948-83e1-e4c7b758565", "eventTime": "2019-07-22T14:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVG0ZBZP06HF5OG7", "expiration": "Jul 22, 2019 8:39:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4126bdf1-0ca9-4628-b011-74ac1532b24c", "record_id": "flaws_cloudtrail:0000193:4126bdf1-0ca9-4628-b011-74ac1532b24c", "row_index": 193, "timestamp": "2019-07-22T14:31:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4126bdf1-0ca9-4628-b011-74ac1532b24c", "eventTime": "2019-07-22T14:31:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4126bdf1-0ca9-4628-b011-74ac1532b24c", "record_id": "flaws_cloudtrail:0000194:4126bdf1-0ca9-4628-b011-74ac1532b24c", "row_index": 194, "timestamp": "2019-07-22T14:31:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4126bdf1-0ca9-4628-b011-74ac1532b24c", "eventTime": "2019-07-22T14:31:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c647e2d5-867a-4e0d-8ba1-35500fb427c6", "record_id": "flaws_cloudtrail:0000195:c647e2d5-867a-4e0d-8ba1-35500fb427c6", "row_index": 195, "timestamp": "2019-07-22T14:33:28Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c647e2d5-867a-4e0d-8ba1-35500fb427c6", "eventTime": "2019-07-22T14:33:28Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c647e2d5-867a-4e0d-8ba1-35500fb427c6", "record_id": "flaws_cloudtrail:0000196:c647e2d5-867a-4e0d-8ba1-35500fb427c6", "row_index": 196, "timestamp": "2019-07-22T14:33:28Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c647e2d5-867a-4e0d-8ba1-35500fb427c6", "eventTime": "2019-07-22T14:33:28Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9afcf3-0627-4aa1-b5c8-19d548c557823", "record_id": "flaws_cloudtrail:0000197:2d9afcf3-0627-4aa1-b5c8-19d548c557823", "row_index": 197, "timestamp": "2019-07-22T14:39:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9afcf3-0627-4aa1-b5c8-19d548c557823", "eventTime": "2019-07-22T14:39:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9afcf3-0627-4aa1-b5c8-19d548c557823", "record_id": "flaws_cloudtrail:0000198:2d9afcf3-0627-4aa1-b5c8-19d548c557823", "row_index": 198, "timestamp": "2019-07-22T14:39:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9afcf3-0627-4aa1-b5c8-19d548c557823", "eventTime": "2019-07-22T14:39:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "record_id": "flaws_cloudtrail:0000199:c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "row_index": 199, "timestamp": "2019-07-22T14:40:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "eventTime": "2019-07-22T14:40:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6ZM4ZD6W57L8PJ2Q", "expiration": "Jul 23, 2019 2:40:21 AM", "sessionToken": "AgoJb3JpZ2luX2VjEFcaCXVzLXdlc3QtMiJGMEQCIDKiaApD4yMAf/rBy8a2XIXKwc7N8bIaee8sAxBV3OjrAiBQec4UOJ818FpM77uXNV74X3LDE4vonIqsToBSzmeJwSqLAgjA//////////8BEAAaDDk3NTQyNjI2MjAyOSIMe07Qx0CmtrX5bl6eKt8BLNi6YbjY1eVvVxPo45OAadxI2QaKTT6UD1XMbBCoyePf3NavS8QAkzl/ms+dsVhEjl8A3eNy+b3dMA3V+7fN+NQMMLS7l0pVcCGnty6QVv2VFJSp/hlq4MHxo7d6Ss0vnM6/bWOD3V3XAlwmHUl+pzwZzIC4mo1X+RL741jh/trCv+7XLULsai7bQO0+zjKQMWLMqHh8MbWgMLhknBE5udBV3K+ed97U+DMJCLp2zXljF9CrxqAmB5zX2iB6cBm4UIo0BxvT1XdTGu9vGdj3kscLqc9eEiTT0/jS8vAOljDVldfpBTq1AZqBH1vLKNVlDP/nMShQq0o69aqSycWJMEA15TxwO8dpF+NXq2kk3P7IGG1khKrtX1NhIJ+Y846FFmzIVO6FeKPh3uOHjeUxw0iYp3OJ4umZktUKrz3i72zkrpMUO5CY1OeMcbpAsEghbUXhJv9zJEjhLG0v8kvK3F1TTqe1I4knvDsQMUWiDQbnhUXGXRsoE2kpqdYhkkQcua26zCVlynJzAgsGSJ/Xalg4ppbMFsxZQsHM3o0="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "record_id": "flaws_cloudtrail:0000200:3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "row_index": 200, "timestamp": "2019-07-22T14:40:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "250.3.4.253", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "eventTime": "2019-07-22T14:40:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.3.4.253", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]c7507ee9b41dd08c98db1ed75437427d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "record_id": "flaws_cloudtrail:0000201:c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "row_index": 201, "timestamp": "2019-07-22T14:40:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06d34a8-5550-4a2d-88cf-80ad137f7a1a", "eventTime": "2019-07-22T14:40:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6ZM4ZD6W57L8PJ2Q", "expiration": "Jul 23, 2019 2:40:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "record_id": "flaws_cloudtrail:0000202:3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "row_index": 202, "timestamp": "2019-07-22T14:40:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "250.3.4.253", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddf6818-6d2b-4de8-bc6a-722b8731c2cc", "eventTime": "2019-07-22T14:40:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.3.4.253", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]c7507ee9b41dd08c98db1ed75437427d", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778ca59e-31b6-471e-b917-35f04945fe8", "record_id": "flaws_cloudtrail:0000203:778ca59e-31b6-471e-b917-35f04945fe8", "row_index": 203, "timestamp": "2019-07-22T14:46:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778ca59e-31b6-471e-b917-35f04945fe8", "eventTime": "2019-07-22T14:46:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778ca59e-31b6-471e-b917-35f04945fe8", "record_id": "flaws_cloudtrail:0000204:778ca59e-31b6-471e-b917-35f04945fe8", "row_index": 204, "timestamp": "2019-07-22T14:46:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778ca59e-31b6-471e-b917-35f04945fe8", "eventTime": "2019-07-22T14:46:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b507d483-047e-4c40-b35b-1a442e55a5c9", "record_id": "flaws_cloudtrail:0000205:b507d483-047e-4c40-b35b-1a442e55a5c9", "row_index": 205, "timestamp": "2019-07-22T14:46:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b507d483-047e-4c40-b35b-1a442e55a5c9", "eventTime": "2019-07-22T14:46:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b507d483-047e-4c40-b35b-1a442e55a5c9", "record_id": "flaws_cloudtrail:0000206:b507d483-047e-4c40-b35b-1a442e55a5c9", "row_index": 206, "timestamp": "2019-07-22T14:46:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b507d483-047e-4c40-b35b-1a442e55a5c9", "eventTime": "2019-07-22T14:46:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "record_id": "flaws_cloudtrail:0000207:2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "row_index": 207, "timestamp": "2019-07-22T14:48:15Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "eventTime": "2019-07-22T14:48:15Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "record_id": "flaws_cloudtrail:0000208:2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "row_index": 208, "timestamp": "2019-07-22T14:48:15Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.215.23.51", "user_agent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2061a4d8-d52e-4ce7-8837-e1d52a5bb469", "eventTime": "2019-07-22T14:48:15Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.215.23.51", "userAgent": "aws-cli/1.16.169 Python/3.6.0 Windows/8.1 botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64802-2c02-4492-b156-a7b248955d1b", "record_id": "flaws_cloudtrail:0000209:64802-2c02-4492-b156-a7b248955d1b", "row_index": 209, "timestamp": "2019-07-22T14:52:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1615, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64802-2c02-4492-b156-a7b248955d1b", "eventTime": "2019-07-22T14:52:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIK37QVQB6ZF1RNKW", "expiration": "Jul 23, 2019 2:52:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecb9b17-83d6-4793-a627-3ab36a48936c", "record_id": "flaws_cloudtrail:0000210:1ecb9b17-83d6-4793-a627-3ab36a48936c", "row_index": 210, "timestamp": "2019-07-22T14:52:48Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "210.51.235.224", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecb9b17-83d6-4793-a627-3ab36a48936c", "eventTime": "2019-07-22T14:52:48Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.51.235.224", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]b115ac5235078bae1740d60c3e810592", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64802-2c02-4492-b156-a7b248955d1b", "record_id": "flaws_cloudtrail:0000211:64802-2c02-4492-b156-a7b248955d1b", "row_index": 211, "timestamp": "2019-07-22T14:52:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1615, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64802-2c02-4492-b156-a7b248955d1b", "eventTime": "2019-07-22T14:52:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIK37QVQB6ZF1RNKW", "expiration": "Jul 23, 2019 2:52:48 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecb9b17-83d6-4793-a627-3ab36a48936c", "record_id": "flaws_cloudtrail:0000212:1ecb9b17-83d6-4793-a627-3ab36a48936c", "row_index": 212, "timestamp": "2019-07-22T14:52:48Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "210.51.235.224", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecb9b17-83d6-4793-a627-3ab36a48936c", "eventTime": "2019-07-22T14:52:48Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "210.51.235.224", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]b115ac5235078bae1740d60c3e810592", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767d3c12-923b-44fd-9aaf-05a816ce9aa2", "record_id": "flaws_cloudtrail:0000213:767d3c12-923b-44fd-9aaf-05a816ce9aa2", "row_index": 213, "timestamp": "2019-07-22T15:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767d3c12-923b-44fd-9aaf-05a816ce9aa2", "eventTime": "2019-07-22T15:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR2FGU5ML2A068UDD", "expiration": "Jul 22, 2019 9:44:54 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767d3c12-923b-44fd-9aaf-05a816ce9aa2", "record_id": "flaws_cloudtrail:0000214:767d3c12-923b-44fd-9aaf-05a816ce9aa2", "row_index": 214, "timestamp": "2019-07-22T15:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767d3c12-923b-44fd-9aaf-05a816ce9aa2", "eventTime": "2019-07-22T15:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR2FGU5ML2A068UDD", "expiration": "Jul 22, 2019 9:44:54 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564c64be-22b6-44f5-b6a0-6e117266a3f0d", "record_id": "flaws_cloudtrail:0000215:564c64be-22b6-44f5-b6a0-6e117266a3f0d", "row_index": 215, "timestamp": "2019-07-22T15:40:28Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564c64be-22b6-44f5-b6a0-6e117266a3f0d", "eventTime": "2019-07-22T15:40:28Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564c64be-22b6-44f5-b6a0-6e117266a3f0d", "record_id": "flaws_cloudtrail:0000216:564c64be-22b6-44f5-b6a0-6e117266a3f0d", "row_index": 216, "timestamp": "2019-07-22T15:40:28Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564c64be-22b6-44f5-b6a0-6e117266a3f0d", "eventTime": "2019-07-22T15:40:28Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2addd38f-b284-4d86-a936-c74c319f0985", "record_id": "flaws_cloudtrail:0000217:2addd38f-b284-4d86-a936-c74c319f0985", "row_index": 217, "timestamp": "2019-07-22T15:47:23Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2addd38f-b284-4d86-a936-c74c319f0985", "eventTime": "2019-07-22T15:47:23Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2addd38f-b284-4d86-a936-c74c319f0985", "record_id": "flaws_cloudtrail:0000218:2addd38f-b284-4d86-a936-c74c319f0985", "row_index": 218, "timestamp": "2019-07-22T15:47:23Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2addd38f-b284-4d86-a936-c74c319f0985", "eventTime": "2019-07-22T15:47:23Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "043968ba5-f2d5-4d5e-8117-2a387f91136", "record_id": "flaws_cloudtrail:0000219:043968ba5-f2d5-4d5e-8117-2a387f91136", "row_index": 219, "timestamp": "2019-07-22T15:48:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "043968ba5-f2d5-4d5e-8117-2a387f91136", "eventTime": "2019-07-22T15:48:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "043968ba5-f2d5-4d5e-8117-2a387f91136", "record_id": "flaws_cloudtrail:0000220:043968ba5-f2d5-4d5e-8117-2a387f91136", "row_index": 220, "timestamp": "2019-07-22T15:48:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "043968ba5-f2d5-4d5e-8117-2a387f91136", "eventTime": "2019-07-22T15:48:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d745ae61-bb41-40a9-91fb-7e1e92772ae5", "record_id": "flaws_cloudtrail:0000221:d745ae61-bb41-40a9-91fb-7e1e92772ae5", "row_index": 221, "timestamp": "2019-07-22T15:48:30Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d745ae61-bb41-40a9-91fb-7e1e92772ae5", "eventTime": "2019-07-22T15:48:30Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d745ae61-bb41-40a9-91fb-7e1e92772ae5", "record_id": "flaws_cloudtrail:0000222:d745ae61-bb41-40a9-91fb-7e1e92772ae5", "row_index": 222, "timestamp": "2019-07-22T15:48:30Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d745ae61-bb41-40a9-91fb-7e1e92772ae5", "eventTime": "2019-07-22T15:48:30Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "record_id": "flaws_cloudtrail:0000223:2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "row_index": 223, "timestamp": "2019-07-22T15:54:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "eventTime": "2019-07-22T15:54:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "record_id": "flaws_cloudtrail:0000224:2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "row_index": 224, "timestamp": "2019-07-22T15:54:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eb7d896-98de-4bc4-ab90-b7d4ef6083e0", "eventTime": "2019-07-22T15:54:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11722-ea33-4d9d-8ea5-8ec07633ae", "record_id": "flaws_cloudtrail:0000225:11722-ea33-4d9d-8ea5-8ec07633ae", "row_index": 225, "timestamp": "2019-07-22T15:55:18Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11722-ea33-4d9d-8ea5-8ec07633ae", "eventTime": "2019-07-22T15:55:18Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11722-ea33-4d9d-8ea5-8ec07633ae", "record_id": "flaws_cloudtrail:0000226:11722-ea33-4d9d-8ea5-8ec07633ae", "row_index": 226, "timestamp": "2019-07-22T15:55:18Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11722-ea33-4d9d-8ea5-8ec07633ae", "eventTime": "2019-07-22T15:55:18Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d6daf46-0cd6-4f7f-bead-9df424788c1d", "record_id": "flaws_cloudtrail:0000227:6d6daf46-0cd6-4f7f-bead-9df424788c1d", "row_index": 227, "timestamp": "2019-07-22T15:55:46Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d6daf46-0cd6-4f7f-bead-9df424788c1d", "eventTime": "2019-07-22T15:55:46Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d6daf46-0cd6-4f7f-bead-9df424788c1d", "record_id": "flaws_cloudtrail:0000228:6d6daf46-0cd6-4f7f-bead-9df424788c1d", "row_index": 228, "timestamp": "2019-07-22T15:55:46Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d6daf46-0cd6-4f7f-bead-9df424788c1d", "eventTime": "2019-07-22T15:55:46Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b008ec-8d7f-45ef-bd50-faffad197135c", "record_id": "flaws_cloudtrail:0000229:04b008ec-8d7f-45ef-bd50-faffad197135c", "row_index": 229, "timestamp": "2019-07-22T15:56:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b008ec-8d7f-45ef-bd50-faffad197135c", "eventTime": "2019-07-22T15:56:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b008ec-8d7f-45ef-bd50-faffad197135c", "record_id": "flaws_cloudtrail:0000230:04b008ec-8d7f-45ef-bd50-faffad197135c", "row_index": 230, "timestamp": "2019-07-22T15:56:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b008ec-8d7f-45ef-bd50-faffad197135c", "eventTime": "2019-07-22T15:56:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbec8b05-3450-49f8-b1b5-6a10a885746d", "record_id": "flaws_cloudtrail:0000231:cbec8b05-3450-49f8-b1b5-6a10a885746d", "row_index": 231, "timestamp": "2019-07-22T15:59:02Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "104.251.234.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbec8b05-3450-49f8-b1b5-6a10a885746d", "eventTime": "2019-07-22T15:59:02Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "104.251.234.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]a3a4348babe6d5715d3d2af325791c6c", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbec8b05-3450-49f8-b1b5-6a10a885746d", "record_id": "flaws_cloudtrail:0000232:cbec8b05-3450-49f8-b1b5-6a10a885746d", "row_index": 232, "timestamp": "2019-07-22T15:59:02Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAL9SB4A8NOU53VYQM", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "104.251.234.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbec8b05-3450-49f8-b1b5-6a10a885746d", "eventTime": "2019-07-22T15:59:02Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "104.251.234.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAL9SB4A8NOU53VYQM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T14:10:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/22/[$LATEST]a3a4348babe6d5715d3d2af325791c6c", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d88b7be-539c-49f5-b304-8d1c75305f2", "record_id": "flaws_cloudtrail:0000233:4d88b7be-539c-49f5-b304-8d1c75305f2", "row_index": 233, "timestamp": "2019-07-22T16:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d88b7be-539c-49f5-b304-8d1c75305f2", "eventTime": "2019-07-22T16:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH3SB4HFUHEVJN0FV", "expiration": "Jul 22, 2019 11:01:25 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d88b7be-539c-49f5-b304-8d1c75305f2", "record_id": "flaws_cloudtrail:0000234:4d88b7be-539c-49f5-b304-8d1c75305f2", "row_index": 234, "timestamp": "2019-07-22T16:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d88b7be-539c-49f5-b304-8d1c75305f2", "eventTime": "2019-07-22T16:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH3SB4HFUHEVJN0FV", "expiration": "Jul 22, 2019 11:01:25 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFkaCXVzLXdlc3QtMiJGMEQCIGNIMxQc0GcC0ifK0Fqg2WVfw6XZpRIgCOXxznesDuUfAiB5iMYwHozJq+UpUWENXG7e90cOQimxh+2/F6S5AXnKhyrjAwjC//////////8BEAAaDDk3NTQyNjI2MjAyOSIMvIC0uX+992rtHDmpKrcDRAS72xGr8cmQuhk3Fi9euPd9xwr4uM9ovqBIOjY8PQmjH0e+X0YQcndoHciGX1NFVWWZ1ivCRsSV4vYKhauuug1iqzdpf/I/05mIYsBCeL6R5EMNv03U7dYW3uCd2g4MrUD7d0kqVv3+Ft3aLhYgBNalkv+JqH65xH2U8/YHajcGYXqrWysu+eehjDUSDD5jsKkHc7DNUJHbclLqUTcLv7PFmI9rLHlq/C4/kk0tS501zV94FLz5LjIkqkr4nQuxvfLTpsX9loQIRhWGNdNz7OLas4MoUaMR9r6Ruyb3TC3/c7tYk9FT+nvy2cmepDS5pMVLQGbHPhw7xGg/OKrzrB/SSXcFQFQc+Gwrixsh5WFqCy0zMQhTneac7+a8VhZxDIZ5jLjk3kOYZnn1mUcuDJvY4kWLNvVr9DBddMUNPbiLEqaNolun75KYo6uJCjcUWz4UE0fBRoh4e9O45cIuuMTGB3+dqvzVpy/3chvPm8GmDUEtdRCbu/ND271Tz6X7EBpSwU2SKQMxKQZELvWdjcSF20OtDmS9S+PtYce5N7OoDWaJWqBZzCCfUdBI4Vgrmp6yBnNY7TDaydfpBTq1ARAi1t37+SR8Na9ZxKqxBlmsxE96wfbLmgpGNANxgmcx2RLNqlVw1QJJUISgWPA5Hd7V4wfZXU55QHtbDFg3NcQhB5MdEgBXphDXvGqaNyG3aq7pDaZzzki/0qydpmn1idjtqf4jy6qRVEj2LLLxiGwQ0BIa4HKwxyWwPS444HKOBe9fZpy/pQQ+InEpmO0Bd4orT2ZB57kZjykoFZcELnbqShD+Cb9Jj4GpY/6+9eQz6PgINE8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56869ea-2e38-44cb-a8b8-df4fde61941", "record_id": "flaws_cloudtrail:0000235:f56869ea-2e38-44cb-a8b8-df4fde61941", "row_index": 235, "timestamp": "2019-07-22T17:06:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56869ea-2e38-44cb-a8b8-df4fde61941", "eventTime": "2019-07-22T17:06:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f56869ea-2e38-44cb-a8b8-df4fde61941", "record_id": "flaws_cloudtrail:0000236:f56869ea-2e38-44cb-a8b8-df4fde61941", "row_index": 236, "timestamp": "2019-07-22T17:06:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f56869ea-2e38-44cb-a8b8-df4fde61941", "eventTime": "2019-07-22T17:06:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a370aa1e-1b32-40d0-8285-b38ca52bd78a", "record_id": "flaws_cloudtrail:0000237:a370aa1e-1b32-40d0-8285-b38ca52bd78a", "row_index": 237, "timestamp": "2019-07-22T17:10:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a370aa1e-1b32-40d0-8285-b38ca52bd78a", "eventTime": "2019-07-22T17:10:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b925af28-905c-4f9f-ab8d-2e9dabd90bad", "record_id": "flaws_cloudtrail:0000238:b925af28-905c-4f9f-ab8d-2e9dabd90bad", "row_index": 238, "timestamp": "2019-07-22T17:10:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b925af28-905c-4f9f-ab8d-2e9dabd90bad", "eventTime": "2019-07-22T17:10:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a370aa1e-1b32-40d0-8285-b38ca52bd78a", "record_id": "flaws_cloudtrail:0000239:a370aa1e-1b32-40d0-8285-b38ca52bd78a", "row_index": 239, "timestamp": "2019-07-22T17:10:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a370aa1e-1b32-40d0-8285-b38ca52bd78a", "eventTime": "2019-07-22T17:10:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b925af28-905c-4f9f-ab8d-2e9dabd90bad", "record_id": "flaws_cloudtrail:0000240:b925af28-905c-4f9f-ab8d-2e9dabd90bad", "row_index": 240, "timestamp": "2019-07-22T17:10:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b925af28-905c-4f9f-ab8d-2e9dabd90bad", "eventTime": "2019-07-22T17:10:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f04ee31-2885-4cec-85b7-5d22ee82428", "record_id": "flaws_cloudtrail:0000241:4f04ee31-2885-4cec-85b7-5d22ee82428", "row_index": 241, "timestamp": "2019-07-22T17:10:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f04ee31-2885-4cec-85b7-5d22ee82428", "eventTime": "2019-07-22T17:10:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271a7645-052d-489f-b10a-009ca63613f6", "record_id": "flaws_cloudtrail:0000242:271a7645-052d-489f-b10a-009ca63613f6", "row_index": 242, "timestamp": "2019-07-22T17:10:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271a7645-052d-489f-b10a-009ca63613f6", "eventTime": "2019-07-22T17:10:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f04ee31-2885-4cec-85b7-5d22ee82428", "record_id": "flaws_cloudtrail:0000243:4f04ee31-2885-4cec-85b7-5d22ee82428", "row_index": 243, "timestamp": "2019-07-22T17:10:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f04ee31-2885-4cec-85b7-5d22ee82428", "eventTime": "2019-07-22T17:10:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271a7645-052d-489f-b10a-009ca63613f6", "record_id": "flaws_cloudtrail:0000244:271a7645-052d-489f-b10a-009ca63613f6", "row_index": 244, "timestamp": "2019-07-22T17:10:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271a7645-052d-489f-b10a-009ca63613f6", "eventTime": "2019-07-22T17:10:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80fab51a-23da-4469-97b2-e98d0f7af74a", "record_id": "flaws_cloudtrail:0000245:80fab51a-23da-4469-97b2-e98d0f7af74a", "row_index": 245, "timestamp": "2019-07-22T17:10:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80fab51a-23da-4469-97b2-e98d0f7af74a", "eventTime": "2019-07-22T17:10:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f6a758-2d8f-4d25-ac15-dec453c72a79", "record_id": "flaws_cloudtrail:0000246:42f6a758-2d8f-4d25-ac15-dec453c72a79", "row_index": 246, "timestamp": "2019-07-22T17:10:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f6a758-2d8f-4d25-ac15-dec453c72a79", "eventTime": "2019-07-22T17:10:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80fab51a-23da-4469-97b2-e98d0f7af74a", "record_id": "flaws_cloudtrail:0000247:80fab51a-23da-4469-97b2-e98d0f7af74a", "row_index": 247, "timestamp": "2019-07-22T17:10:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80fab51a-23da-4469-97b2-e98d0f7af74a", "eventTime": "2019-07-22T17:10:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f6a758-2d8f-4d25-ac15-dec453c72a79", "record_id": "flaws_cloudtrail:0000248:42f6a758-2d8f-4d25-ac15-dec453c72a79", "row_index": 248, "timestamp": "2019-07-22T17:10:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f6a758-2d8f-4d25-ac15-dec453c72a79", "eventTime": "2019-07-22T17:10:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1b6d67-3e71-4142-bef3-817561f402278", "record_id": "flaws_cloudtrail:0000249:2d1b6d67-3e71-4142-bef3-817561f402278", "row_index": 249, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1b6d67-3e71-4142-bef3-817561f402278", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "174dbd34-02e6-4c72-9a96-06dac693db0d", "record_id": "flaws_cloudtrail:0000250:174dbd34-02e6-4c72-9a96-06dac693db0d", "row_index": 250, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "174dbd34-02e6-4c72-9a96-06dac693db0d", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d840efc5-ed81-41cb-9b4e-eb05952358b6", "record_id": "flaws_cloudtrail:0000251:d840efc5-ed81-41cb-9b4e-eb05952358b6", "row_index": 251, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d840efc5-ed81-41cb-9b4e-eb05952358b6", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1b6d67-3e71-4142-bef3-817561f402278", "record_id": "flaws_cloudtrail:0000252:2d1b6d67-3e71-4142-bef3-817561f402278", "row_index": 252, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1b6d67-3e71-4142-bef3-817561f402278", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "174dbd34-02e6-4c72-9a96-06dac693db0d", "record_id": "flaws_cloudtrail:0000253:174dbd34-02e6-4c72-9a96-06dac693db0d", "row_index": 253, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "174dbd34-02e6-4c72-9a96-06dac693db0d", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d840efc5-ed81-41cb-9b4e-eb05952358b6", "record_id": "flaws_cloudtrail:0000254:d840efc5-ed81-41cb-9b4e-eb05952358b6", "row_index": 254, "timestamp": "2019-07-22T17:10:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d840efc5-ed81-41cb-9b4e-eb05952358b6", "eventTime": "2019-07-22T17:10:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7029c024-a225-41c4-95bb-3e11f8980788", "record_id": "flaws_cloudtrail:0000255:7029c024-a225-41c4-95bb-3e11f8980788", "row_index": 255, "timestamp": "2019-07-22T17:10:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7029c024-a225-41c4-95bb-3e11f8980788", "eventTime": "2019-07-22T17:10:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "record_id": "flaws_cloudtrail:0000256:3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "row_index": 256, "timestamp": "2019-07-22T17:10:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "eventTime": "2019-07-22T17:10:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7029c024-a225-41c4-95bb-3e11f8980788", "record_id": "flaws_cloudtrail:0000257:7029c024-a225-41c4-95bb-3e11f8980788", "row_index": 257, "timestamp": "2019-07-22T17:10:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7029c024-a225-41c4-95bb-3e11f8980788", "eventTime": "2019-07-22T17:10:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "record_id": "flaws_cloudtrail:0000258:3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "row_index": 258, "timestamp": "2019-07-22T17:10:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c078b4e-afff-42c2-99ac-2b12ff1cfe0f", "eventTime": "2019-07-22T17:10:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "record_id": "flaws_cloudtrail:0000259:bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "row_index": 259, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86459d4-4c54-4d8e-8bed-fce46143dce2", "record_id": "flaws_cloudtrail:0000260:86459d4-4c54-4d8e-8bed-fce46143dce2", "row_index": 260, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86459d4-4c54-4d8e-8bed-fce46143dce2", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7be67f6-b569-4f60-b228-eaadd90caa12", "record_id": "flaws_cloudtrail:0000261:c7be67f6-b569-4f60-b228-eaadd90caa12", "row_index": 261, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7be67f6-b569-4f60-b228-eaadd90caa12", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "record_id": "flaws_cloudtrail:0000262:bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "row_index": 262, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd32a355-63ba-4e9f-a3cb-29821e75d8c6", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86459d4-4c54-4d8e-8bed-fce46143dce2", "record_id": "flaws_cloudtrail:0000263:86459d4-4c54-4d8e-8bed-fce46143dce2", "row_index": 263, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86459d4-4c54-4d8e-8bed-fce46143dce2", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7be67f6-b569-4f60-b228-eaadd90caa12", "record_id": "flaws_cloudtrail:0000264:c7be67f6-b569-4f60-b228-eaadd90caa12", "row_index": 264, "timestamp": "2019-07-22T17:10:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7be67f6-b569-4f60-b228-eaadd90caa12", "eventTime": "2019-07-22T17:10:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "702a8438-0ff8-4f7e-b6db-d4630fec628c", "record_id": "flaws_cloudtrail:0000265:702a8438-0ff8-4f7e-b6db-d4630fec628c", "row_index": 265, "timestamp": "2019-07-22T17:10:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "702a8438-0ff8-4f7e-b6db-d4630fec628c", "eventTime": "2019-07-22T17:10:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "record_id": "flaws_cloudtrail:0000266:4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "row_index": 266, "timestamp": "2019-07-22T17:10:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "eventTime": "2019-07-22T17:10:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "702a8438-0ff8-4f7e-b6db-d4630fec628c", "record_id": "flaws_cloudtrail:0000267:702a8438-0ff8-4f7e-b6db-d4630fec628c", "row_index": 267, "timestamp": "2019-07-22T17:10:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "702a8438-0ff8-4f7e-b6db-d4630fec628c", "eventTime": "2019-07-22T17:10:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "record_id": "flaws_cloudtrail:0000268:4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "row_index": 268, "timestamp": "2019-07-22T17:10:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc9e6a6-eddf-46c4-bbe2-68ce7e9c72d2", "eventTime": "2019-07-22T17:10:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ce2756b-a2dc-4047-ad63-e5f54060ab", "record_id": "flaws_cloudtrail:0000269:5ce2756b-a2dc-4047-ad63-e5f54060ab", "row_index": 269, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ce2756b-a2dc-4047-ad63-e5f54060ab", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9db2323-5b45-4ff7-999a-c114a48107b1", "record_id": "flaws_cloudtrail:0000270:c9db2323-5b45-4ff7-999a-c114a48107b1", "row_index": 270, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9db2323-5b45-4ff7-999a-c114a48107b1", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2009b490-e492-4825-8756-680adbe6fda2", "record_id": "flaws_cloudtrail:0000271:2009b490-e492-4825-8756-680adbe6fda2", "row_index": 271, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2009b490-e492-4825-8756-680adbe6fda2", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ce2756b-a2dc-4047-ad63-e5f54060ab", "record_id": "flaws_cloudtrail:0000272:5ce2756b-a2dc-4047-ad63-e5f54060ab", "row_index": 272, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ce2756b-a2dc-4047-ad63-e5f54060ab", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9db2323-5b45-4ff7-999a-c114a48107b1", "record_id": "flaws_cloudtrail:0000273:c9db2323-5b45-4ff7-999a-c114a48107b1", "row_index": 273, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9db2323-5b45-4ff7-999a-c114a48107b1", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2009b490-e492-4825-8756-680adbe6fda2", "record_id": "flaws_cloudtrail:0000274:2009b490-e492-4825-8756-680adbe6fda2", "row_index": 274, "timestamp": "2019-07-22T17:10:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2009b490-e492-4825-8756-680adbe6fda2", "eventTime": "2019-07-22T17:10:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31402d63-f55c-4d22-b9eb-899d4e15328f", "record_id": "flaws_cloudtrail:0000275:31402d63-f55c-4d22-b9eb-899d4e15328f", "row_index": 275, "timestamp": "2019-07-22T17:10:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31402d63-f55c-4d22-b9eb-899d4e15328f", "eventTime": "2019-07-22T17:10:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ced5a2-78f2-49c9-9e7f-efddeed4846f", "record_id": "flaws_cloudtrail:0000276:49ced5a2-78f2-49c9-9e7f-efddeed4846f", "row_index": 276, "timestamp": "2019-07-22T17:10:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ced5a2-78f2-49c9-9e7f-efddeed4846f", "eventTime": "2019-07-22T17:10:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31402d63-f55c-4d22-b9eb-899d4e15328f", "record_id": "flaws_cloudtrail:0000277:31402d63-f55c-4d22-b9eb-899d4e15328f", "row_index": 277, "timestamp": "2019-07-22T17:10:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31402d63-f55c-4d22-b9eb-899d4e15328f", "eventTime": "2019-07-22T17:10:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ced5a2-78f2-49c9-9e7f-efddeed4846f", "record_id": "flaws_cloudtrail:0000278:49ced5a2-78f2-49c9-9e7f-efddeed4846f", "row_index": 278, "timestamp": "2019-07-22T17:10:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ced5a2-78f2-49c9-9e7f-efddeed4846f", "eventTime": "2019-07-22T17:10:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e39dcf2-a6f0-4f73-a952-b718c0857a28", "record_id": "flaws_cloudtrail:0000279:7e39dcf2-a6f0-4f73-a952-b718c0857a28", "row_index": 279, "timestamp": "2019-07-22T17:10:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e39dcf2-a6f0-4f73-a952-b718c0857a28", "eventTime": "2019-07-22T17:10:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949967-0b5b-4c58-a42f-1ac996ca76e3", "record_id": "flaws_cloudtrail:0000280:949967-0b5b-4c58-a42f-1ac996ca76e3", "row_index": 280, "timestamp": "2019-07-22T17:10:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949967-0b5b-4c58-a42f-1ac996ca76e3", "eventTime": "2019-07-22T17:10:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e39dcf2-a6f0-4f73-a952-b718c0857a28", "record_id": "flaws_cloudtrail:0000281:7e39dcf2-a6f0-4f73-a952-b718c0857a28", "row_index": 281, "timestamp": "2019-07-22T17:10:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e39dcf2-a6f0-4f73-a952-b718c0857a28", "eventTime": "2019-07-22T17:10:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949967-0b5b-4c58-a42f-1ac996ca76e3", "record_id": "flaws_cloudtrail:0000282:949967-0b5b-4c58-a42f-1ac996ca76e3", "row_index": 282, "timestamp": "2019-07-22T17:10:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949967-0b5b-4c58-a42f-1ac996ca76e3", "eventTime": "2019-07-22T17:10:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "record_id": "flaws_cloudtrail:0000283:0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "row_index": 283, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "record_id": "flaws_cloudtrail:0000284:fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "row_index": 284, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3174a7f9-4f6e-4427-9087-2779fec47ab9", "record_id": "flaws_cloudtrail:0000285:3174a7f9-4f6e-4427-9087-2779fec47ab9", "row_index": 285, "timestamp": "2019-07-22T17:10:11Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3174a7f9-4f6e-4427-9087-2779fec47ab9", "eventTime": "2019-07-22T17:10:11Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f0e3df-b244-48d7-86b4-a0687bd83fab", "record_id": "flaws_cloudtrail:0000286:46f0e3df-b244-48d7-86b4-a0687bd83fab", "row_index": 286, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f0e3df-b244-48d7-86b4-a0687bd83fab", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207e9ca1-f9e0-49b6-8097-4492f2904fe1", "record_id": "flaws_cloudtrail:0000287:207e9ca1-f9e0-49b6-8097-4492f2904fe1", "row_index": 287, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207e9ca1-f9e0-49b6-8097-4492f2904fe1", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945a37e4-8b66-43dc-b32d-486289a8d5d7", "record_id": "flaws_cloudtrail:0000288:945a37e4-8b66-43dc-b32d-486289a8d5d7", "row_index": 288, "timestamp": "2019-07-22T17:10:11Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945a37e4-8b66-43dc-b32d-486289a8d5d7", "eventTime": "2019-07-22T17:10:11Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "record_id": "flaws_cloudtrail:0000289:0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "row_index": 289, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa2e84e-6d12-4a52-9222-cea1f7d3d934", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "record_id": "flaws_cloudtrail:0000290:fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "row_index": 290, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fafa002a-71c5-4dcc-81e8-26e4a8b4f89e", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3174a7f9-4f6e-4427-9087-2779fec47ab9", "record_id": "flaws_cloudtrail:0000291:3174a7f9-4f6e-4427-9087-2779fec47ab9", "row_index": 291, "timestamp": "2019-07-22T17:10:11Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3174a7f9-4f6e-4427-9087-2779fec47ab9", "eventTime": "2019-07-22T17:10:11Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f0e3df-b244-48d7-86b4-a0687bd83fab", "record_id": "flaws_cloudtrail:0000292:46f0e3df-b244-48d7-86b4-a0687bd83fab", "row_index": 292, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f0e3df-b244-48d7-86b4-a0687bd83fab", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207e9ca1-f9e0-49b6-8097-4492f2904fe1", "record_id": "flaws_cloudtrail:0000293:207e9ca1-f9e0-49b6-8097-4492f2904fe1", "row_index": 293, "timestamp": "2019-07-22T17:10:11Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207e9ca1-f9e0-49b6-8097-4492f2904fe1", "eventTime": "2019-07-22T17:10:11Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945a37e4-8b66-43dc-b32d-486289a8d5d7", "record_id": "flaws_cloudtrail:0000294:945a37e4-8b66-43dc-b32d-486289a8d5d7", "row_index": 294, "timestamp": "2019-07-22T17:10:11Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945a37e4-8b66-43dc-b32d-486289a8d5d7", "eventTime": "2019-07-22T17:10:11Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c67715c-e87b-40ff-a1d5-1ac419f7faae", "record_id": "flaws_cloudtrail:0000295:0c67715c-e87b-40ff-a1d5-1ac419f7faae", "row_index": 295, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c67715c-e87b-40ff-a1d5-1ac419f7faae", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "record_id": "flaws_cloudtrail:0000296:0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "row_index": 296, "timestamp": "2019-07-22T17:10:12Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "eventTime": "2019-07-22T17:10:12Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e66cfba2-de6a-41ba-8884-151947e0dd3", "record_id": "flaws_cloudtrail:0000297:e66cfba2-de6a-41ba-8884-151947e0dd3", "row_index": 297, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e66cfba2-de6a-41ba-8884-151947e0dd3", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cabf0427-f275-485f-9729-dc6d1c507c69", "record_id": "flaws_cloudtrail:0000298:cabf0427-f275-485f-9729-dc6d1c507c69", "row_index": 298, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cabf0427-f275-485f-9729-dc6d1c507c69", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d31d275-7249-44dc-a713-1e6bb01dca70", "record_id": "flaws_cloudtrail:0000299:3d31d275-7249-44dc-a713-1e6bb01dca70", "row_index": 299, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d31d275-7249-44dc-a713-1e6bb01dca70", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "record_id": "flaws_cloudtrail:0000300:78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "row_index": 300, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef2531ae-4412-4133-a494-392b88aaa090", "record_id": "flaws_cloudtrail:0000301:ef2531ae-4412-4133-a494-392b88aaa090", "row_index": 301, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef2531ae-4412-4133-a494-392b88aaa090", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19f1744-7d58-434b-a6f2-d944d77c73b9", "record_id": "flaws_cloudtrail:0000302:f19f1744-7d58-434b-a6f2-d944d77c73b9", "row_index": 302, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19f1744-7d58-434b-a6f2-d944d77c73b9", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2356fc5c-50bd-4f04-bf85-53f803e19320", "record_id": "flaws_cloudtrail:0000303:2356fc5c-50bd-4f04-bf85-53f803e19320", "row_index": 303, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2356fc5c-50bd-4f04-bf85-53f803e19320", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de4be833-8f47-4864-8292-2f4e780c8985", "record_id": "flaws_cloudtrail:0000304:de4be833-8f47-4864-8292-2f4e780c8985", "row_index": 304, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de4be833-8f47-4864-8292-2f4e780c8985", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3dbbb56-5497-4944-b5fc-e3df33c3647a", "record_id": "flaws_cloudtrail:0000305:e3dbbb56-5497-4944-b5fc-e3df33c3647a", "row_index": 305, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3dbbb56-5497-4944-b5fc-e3df33c3647a", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c67715c-e87b-40ff-a1d5-1ac419f7faae", "record_id": "flaws_cloudtrail:0000306:0c67715c-e87b-40ff-a1d5-1ac419f7faae", "row_index": 306, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c67715c-e87b-40ff-a1d5-1ac419f7faae", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "record_id": "flaws_cloudtrail:0000307:0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "row_index": 307, "timestamp": "2019-07-22T17:10:12Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdb0ad1-6598-4076-997b-31b35d9d8fb4", "eventTime": "2019-07-22T17:10:12Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e66cfba2-de6a-41ba-8884-151947e0dd3", "record_id": "flaws_cloudtrail:0000308:e66cfba2-de6a-41ba-8884-151947e0dd3", "row_index": 308, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e66cfba2-de6a-41ba-8884-151947e0dd3", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cabf0427-f275-485f-9729-dc6d1c507c69", "record_id": "flaws_cloudtrail:0000309:cabf0427-f275-485f-9729-dc6d1c507c69", "row_index": 309, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cabf0427-f275-485f-9729-dc6d1c507c69", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d31d275-7249-44dc-a713-1e6bb01dca70", "record_id": "flaws_cloudtrail:0000310:3d31d275-7249-44dc-a713-1e6bb01dca70", "row_index": 310, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d31d275-7249-44dc-a713-1e6bb01dca70", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "record_id": "flaws_cloudtrail:0000311:78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "row_index": 311, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78f978c1-4d13-4c24-b8e0-fe1d2426bf09", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef2531ae-4412-4133-a494-392b88aaa090", "record_id": "flaws_cloudtrail:0000312:ef2531ae-4412-4133-a494-392b88aaa090", "row_index": 312, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef2531ae-4412-4133-a494-392b88aaa090", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f19f1744-7d58-434b-a6f2-d944d77c73b9", "record_id": "flaws_cloudtrail:0000313:f19f1744-7d58-434b-a6f2-d944d77c73b9", "row_index": 313, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f19f1744-7d58-434b-a6f2-d944d77c73b9", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2356fc5c-50bd-4f04-bf85-53f803e19320", "record_id": "flaws_cloudtrail:0000314:2356fc5c-50bd-4f04-bf85-53f803e19320", "row_index": 314, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2356fc5c-50bd-4f04-bf85-53f803e19320", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de4be833-8f47-4864-8292-2f4e780c8985", "record_id": "flaws_cloudtrail:0000315:de4be833-8f47-4864-8292-2f4e780c8985", "row_index": 315, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de4be833-8f47-4864-8292-2f4e780c8985", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3dbbb56-5497-4944-b5fc-e3df33c3647a", "record_id": "flaws_cloudtrail:0000316:e3dbbb56-5497-4944-b5fc-e3df33c3647a", "row_index": 316, "timestamp": "2019-07-22T17:10:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3dbbb56-5497-4944-b5fc-e3df33c3647a", "eventTime": "2019-07-22T17:10:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d131b1fd-2fac-4075-9810-398a1cc3d5d2", "record_id": "flaws_cloudtrail:0000317:d131b1fd-2fac-4075-9810-398a1cc3d5d2", "row_index": 317, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d131b1fd-2fac-4075-9810-398a1cc3d5d2", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63bfccec-1f20-495e-8874-9448df813e79", "record_id": "flaws_cloudtrail:0000318:63bfccec-1f20-495e-8874-9448df813e79", "row_index": 318, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63bfccec-1f20-495e-8874-9448df813e79", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "record_id": "flaws_cloudtrail:0000319:d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "row_index": 319, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c15ef63-c1aa-43f7-be11-23c8644e066e", "record_id": "flaws_cloudtrail:0000320:0c15ef63-c1aa-43f7-be11-23c8644e066e", "row_index": 320, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c15ef63-c1aa-43f7-be11-23c8644e066e", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-north-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12bfe364-ce88-4f69-a46a-09daeff6c1f0", "record_id": "flaws_cloudtrail:0000321:12bfe364-ce88-4f69-a46a-09daeff6c1f0", "row_index": 321, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12bfe364-ce88-4f69-a46a-09daeff6c1f0", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d66586-087a-441c-a9b9-e1ec4b491f59", "record_id": "flaws_cloudtrail:0000322:d66586-087a-441c-a9b9-e1ec4b491f59", "row_index": 322, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d66586-087a-441c-a9b9-e1ec4b491f59", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "record_id": "flaws_cloudtrail:0000323:dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "row_index": 323, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "record_id": "flaws_cloudtrail:0000324:3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "row_index": 324, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "351a96c8-44af-457e-9f06-fa72dc4e9e30", "record_id": "flaws_cloudtrail:0000325:351a96c8-44af-457e-9f06-fa72dc4e9e30", "row_index": 325, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "351a96c8-44af-457e-9f06-fa72dc4e9e30", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d131b1fd-2fac-4075-9810-398a1cc3d5d2", "record_id": "flaws_cloudtrail:0000326:d131b1fd-2fac-4075-9810-398a1cc3d5d2", "row_index": 326, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d131b1fd-2fac-4075-9810-398a1cc3d5d2", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63bfccec-1f20-495e-8874-9448df813e79", "record_id": "flaws_cloudtrail:0000327:63bfccec-1f20-495e-8874-9448df813e79", "row_index": 327, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63bfccec-1f20-495e-8874-9448df813e79", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "record_id": "flaws_cloudtrail:0000328:d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "row_index": 328, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8bfbdcc-84c0-4788-ab52-7cf7ec188f66", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c15ef63-c1aa-43f7-be11-23c8644e066e", "record_id": "flaws_cloudtrail:0000329:0c15ef63-c1aa-43f7-be11-23c8644e066e", "row_index": 329, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c15ef63-c1aa-43f7-be11-23c8644e066e", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-north-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12bfe364-ce88-4f69-a46a-09daeff6c1f0", "record_id": "flaws_cloudtrail:0000330:12bfe364-ce88-4f69-a46a-09daeff6c1f0", "row_index": 330, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12bfe364-ce88-4f69-a46a-09daeff6c1f0", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d66586-087a-441c-a9b9-e1ec4b491f59", "record_id": "flaws_cloudtrail:0000331:d66586-087a-441c-a9b9-e1ec4b491f59", "row_index": 331, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d66586-087a-441c-a9b9-e1ec4b491f59", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "record_id": "flaws_cloudtrail:0000332:dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "row_index": 332, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc34bd62-c870-47db-96b6-0d3c3c6ea78a", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "record_id": "flaws_cloudtrail:0000333:3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "row_index": 333, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b1f73e5-6b2f-41e0-a4eb-2a03ba39011f", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "351a96c8-44af-457e-9f06-fa72dc4e9e30", "record_id": "flaws_cloudtrail:0000334:351a96c8-44af-457e-9f06-fa72dc4e9e30", "row_index": 334, "timestamp": "2019-07-22T17:10:13Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "351a96c8-44af-457e-9f06-fa72dc4e9e30", "eventTime": "2019-07-22T17:10:13Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592a2821-b52a-423f-9c0e-45eab0a27aa6", "record_id": "flaws_cloudtrail:0000335:592a2821-b52a-423f-9c0e-45eab0a27aa6", "row_index": 335, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592a2821-b52a-423f-9c0e-45eab0a27aa6", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "record_id": "flaws_cloudtrail:0000336:e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "row_index": 336, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca6e535-389b-4cf0-b2f0-262b455d9b97", "record_id": "flaws_cloudtrail:0000337:eca6e535-389b-4cf0-b2f0-262b455d9b97", "row_index": 337, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca6e535-389b-4cf0-b2f0-262b455d9b97", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb15ac9-94c9-4114-b45e-6e6264039842", "record_id": "flaws_cloudtrail:0000338:6fb15ac9-94c9-4114-b45e-6e6264039842", "row_index": 338, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb15ac9-94c9-4114-b45e-6e6264039842", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "record_id": "flaws_cloudtrail:0000339:dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "row_index": 339, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "record_id": "flaws_cloudtrail:0000340:3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "row_index": 340, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c2e2b24-22b1-4349-acbf-570af2f484f5", "record_id": "flaws_cloudtrail:0000341:5c2e2b24-22b1-4349-acbf-570af2f484f5", "row_index": 341, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c2e2b24-22b1-4349-acbf-570af2f484f5", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "record_id": "flaws_cloudtrail:0000342:77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "row_index": 342, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4febc3-9a53-4865-bfee-4b992b98cd4e", "record_id": "flaws_cloudtrail:0000343:5c4febc3-9a53-4865-bfee-4b992b98cd4e", "row_index": 343, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4febc3-9a53-4865-bfee-4b992b98cd4e", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13140d-a063-4557-827e-c4284da1e1a3", "record_id": "flaws_cloudtrail:0000344:13140d-a063-4557-827e-c4284da1e1a3", "row_index": 344, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13140d-a063-4557-827e-c4284da1e1a3", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592a2821-b52a-423f-9c0e-45eab0a27aa6", "record_id": "flaws_cloudtrail:0000345:592a2821-b52a-423f-9c0e-45eab0a27aa6", "row_index": 345, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592a2821-b52a-423f-9c0e-45eab0a27aa6", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "record_id": "flaws_cloudtrail:0000346:e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "row_index": 346, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7708d29-5c64-416b-95cb-acbf1a4dc1e7", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca6e535-389b-4cf0-b2f0-262b455d9b97", "record_id": "flaws_cloudtrail:0000347:eca6e535-389b-4cf0-b2f0-262b455d9b97", "row_index": 347, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca6e535-389b-4cf0-b2f0-262b455d9b97", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb15ac9-94c9-4114-b45e-6e6264039842", "record_id": "flaws_cloudtrail:0000348:6fb15ac9-94c9-4114-b45e-6e6264039842", "row_index": 348, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb15ac9-94c9-4114-b45e-6e6264039842", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "record_id": "flaws_cloudtrail:0000349:dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "row_index": 349, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc8527a4-68ad-4169-bf03-84ce9b7f34ef", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "record_id": "flaws_cloudtrail:0000350:3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "row_index": 350, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3362a7f1-ce86-44d4-bc79-8aea177a9cc4", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c2e2b24-22b1-4349-acbf-570af2f484f5", "record_id": "flaws_cloudtrail:0000351:5c2e2b24-22b1-4349-acbf-570af2f484f5", "row_index": 351, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c2e2b24-22b1-4349-acbf-570af2f484f5", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "record_id": "flaws_cloudtrail:0000352:77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "row_index": 352, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b1d074-510f-4bc9-9b05-b5ca1e66ea9d", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4febc3-9a53-4865-bfee-4b992b98cd4e", "record_id": "flaws_cloudtrail:0000353:5c4febc3-9a53-4865-bfee-4b992b98cd4e", "row_index": 353, "timestamp": "2019-07-22T17:10:14Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4febc3-9a53-4865-bfee-4b992b98cd4e", "eventTime": "2019-07-22T17:10:14Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13140d-a063-4557-827e-c4284da1e1a3", "record_id": "flaws_cloudtrail:0000354:13140d-a063-4557-827e-c4284da1e1a3", "row_index": 354, "timestamp": "2019-07-22T17:10:14Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13140d-a063-4557-827e-c4284da1e1a3", "eventTime": "2019-07-22T17:10:14Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677d1de3-0a65-4bb6-b75e-8c123cadefe4", "record_id": "flaws_cloudtrail:0000355:677d1de3-0a65-4bb6-b75e-8c123cadefe4", "row_index": 355, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677d1de3-0a65-4bb6-b75e-8c123cadefe4", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "record_id": "flaws_cloudtrail:0000356:ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "row_index": 356, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dc5e43c-56de-4291-ae59-d763978fa8", "record_id": "flaws_cloudtrail:0000357:1dc5e43c-56de-4291-ae59-d763978fa8", "row_index": 357, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dc5e43c-56de-4291-ae59-d763978fa8", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237e150e-cd40-4624-a6bd-f3e595cd656d", "record_id": "flaws_cloudtrail:0000358:237e150e-cd40-4624-a6bd-f3e595cd656d", "row_index": 358, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237e150e-cd40-4624-a6bd-f3e595cd656d", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209e66d1-afe2-4374-a80f-c58ad70f371e", "record_id": "flaws_cloudtrail:0000359:209e66d1-afe2-4374-a80f-c58ad70f371e", "row_index": 359, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209e66d1-afe2-4374-a80f-c58ad70f371e", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52466b-813e-430c-aa90-cb19efed2612", "record_id": "flaws_cloudtrail:0000360:b52466b-813e-430c-aa90-cb19efed2612", "row_index": 360, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52466b-813e-430c-aa90-cb19efed2612", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34165-1968-46a9-a381-804541eb6767", "record_id": "flaws_cloudtrail:0000361:f34165-1968-46a9-a381-804541eb6767", "row_index": 361, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34165-1968-46a9-a381-804541eb6767", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4236db-518f-43ec-abf5-a979c44d287d", "record_id": "flaws_cloudtrail:0000362:6e4236db-518f-43ec-abf5-a979c44d287d", "row_index": 362, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4236db-518f-43ec-abf5-a979c44d287d", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ba250-8675-4d48-87a0-525d5cc59edc", "record_id": "flaws_cloudtrail:0000363:ff3ba250-8675-4d48-87a0-525d5cc59edc", "row_index": 363, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ba250-8675-4d48-87a0-525d5cc59edc", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677d1de3-0a65-4bb6-b75e-8c123cadefe4", "record_id": "flaws_cloudtrail:0000364:677d1de3-0a65-4bb6-b75e-8c123cadefe4", "row_index": 364, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677d1de3-0a65-4bb6-b75e-8c123cadefe4", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "record_id": "flaws_cloudtrail:0000365:ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "row_index": 365, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea18a6b1-10c3-439b-8ffe-25a13eae3b41", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dc5e43c-56de-4291-ae59-d763978fa8", "record_id": "flaws_cloudtrail:0000366:1dc5e43c-56de-4291-ae59-d763978fa8", "row_index": 366, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dc5e43c-56de-4291-ae59-d763978fa8", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237e150e-cd40-4624-a6bd-f3e595cd656d", "record_id": "flaws_cloudtrail:0000367:237e150e-cd40-4624-a6bd-f3e595cd656d", "row_index": 367, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237e150e-cd40-4624-a6bd-f3e595cd656d", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209e66d1-afe2-4374-a80f-c58ad70f371e", "record_id": "flaws_cloudtrail:0000368:209e66d1-afe2-4374-a80f-c58ad70f371e", "row_index": 368, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209e66d1-afe2-4374-a80f-c58ad70f371e", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52466b-813e-430c-aa90-cb19efed2612", "record_id": "flaws_cloudtrail:0000369:b52466b-813e-430c-aa90-cb19efed2612", "row_index": 369, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52466b-813e-430c-aa90-cb19efed2612", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34165-1968-46a9-a381-804541eb6767", "record_id": "flaws_cloudtrail:0000370:f34165-1968-46a9-a381-804541eb6767", "row_index": 370, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34165-1968-46a9-a381-804541eb6767", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e4236db-518f-43ec-abf5-a979c44d287d", "record_id": "flaws_cloudtrail:0000371:6e4236db-518f-43ec-abf5-a979c44d287d", "row_index": 371, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e4236db-518f-43ec-abf5-a979c44d287d", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3ba250-8675-4d48-87a0-525d5cc59edc", "record_id": "flaws_cloudtrail:0000372:ff3ba250-8675-4d48-87a0-525d5cc59edc", "row_index": 372, "timestamp": "2019-07-22T17:10:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3ba250-8675-4d48-87a0-525d5cc59edc", "eventTime": "2019-07-22T17:10:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81353d01-d4e4-458e-ad8c-bb7dde6640da", "record_id": "flaws_cloudtrail:0000373:81353d01-d4e4-458e-ad8c-bb7dde6640da", "row_index": 373, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81353d01-d4e4-458e-ad8c-bb7dde6640da", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33fac3d8-dd1a-4627-bc50-e2df772338ad", "record_id": "flaws_cloudtrail:0000374:33fac3d8-dd1a-4627-bc50-e2df772338ad", "row_index": 374, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33fac3d8-dd1a-4627-bc50-e2df772338ad", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130c8b17-9754-40ed-8f01-15f18bafa3df", "record_id": "flaws_cloudtrail:0000375:130c8b17-9754-40ed-8f01-15f18bafa3df", "row_index": 375, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130c8b17-9754-40ed-8f01-15f18bafa3df", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "record_id": "flaws_cloudtrail:0000376:194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "row_index": 376, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "record_id": "flaws_cloudtrail:0000377:2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "row_index": 377, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866311-9d81-402f-85c3-872c6df6c576", "record_id": "flaws_cloudtrail:0000378:866311-9d81-402f-85c3-872c6df6c576", "row_index": 378, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866311-9d81-402f-85c3-872c6df6c576", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29165e8b-8be3-4b7b-813b-1e309db3c962", "record_id": "flaws_cloudtrail:0000379:29165e8b-8be3-4b7b-813b-1e309db3c962", "row_index": 379, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29165e8b-8be3-4b7b-813b-1e309db3c962", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad54416-cf10-438a-b2e9-c26373ccf49e", "record_id": "flaws_cloudtrail:0000380:ad54416-cf10-438a-b2e9-c26373ccf49e", "row_index": 380, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad54416-cf10-438a-b2e9-c26373ccf49e", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99555cec-44ab-4eb8-8198-fae973e5e700", "record_id": "flaws_cloudtrail:0000381:99555cec-44ab-4eb8-8198-fae973e5e700", "row_index": 381, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99555cec-44ab-4eb8-8198-fae973e5e700", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c051663cc-c5f9-41f7-b96f-6093521d517b", "record_id": "flaws_cloudtrail:0000382:c051663cc-c5f9-41f7-b96f-6093521d517b", "row_index": 382, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c051663cc-c5f9-41f7-b96f-6093521d517b", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "record_id": "flaws_cloudtrail:0000383:1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "row_index": 383, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91514d5-fbda-4b53-bf4e-976ae184bd64", "record_id": "flaws_cloudtrail:0000384:b91514d5-fbda-4b53-bf4e-976ae184bd64", "row_index": 384, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91514d5-fbda-4b53-bf4e-976ae184bd64", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81353d01-d4e4-458e-ad8c-bb7dde6640da", "record_id": "flaws_cloudtrail:0000385:81353d01-d4e4-458e-ad8c-bb7dde6640da", "row_index": 385, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81353d01-d4e4-458e-ad8c-bb7dde6640da", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33fac3d8-dd1a-4627-bc50-e2df772338ad", "record_id": "flaws_cloudtrail:0000386:33fac3d8-dd1a-4627-bc50-e2df772338ad", "row_index": 386, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33fac3d8-dd1a-4627-bc50-e2df772338ad", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130c8b17-9754-40ed-8f01-15f18bafa3df", "record_id": "flaws_cloudtrail:0000387:130c8b17-9754-40ed-8f01-15f18bafa3df", "row_index": 387, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130c8b17-9754-40ed-8f01-15f18bafa3df", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "record_id": "flaws_cloudtrail:0000388:194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "row_index": 388, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "194767df6-30c7-4a4d-bc3a-1f115b9cf81f", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "record_id": "flaws_cloudtrail:0000389:2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "row_index": 389, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e762ad8-bb7a-468d-b0c6-2f4f9b53e868", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866311-9d81-402f-85c3-872c6df6c576", "record_id": "flaws_cloudtrail:0000390:866311-9d81-402f-85c3-872c6df6c576", "row_index": 390, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866311-9d81-402f-85c3-872c6df6c576", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29165e8b-8be3-4b7b-813b-1e309db3c962", "record_id": "flaws_cloudtrail:0000391:29165e8b-8be3-4b7b-813b-1e309db3c962", "row_index": 391, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29165e8b-8be3-4b7b-813b-1e309db3c962", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad54416-cf10-438a-b2e9-c26373ccf49e", "record_id": "flaws_cloudtrail:0000392:ad54416-cf10-438a-b2e9-c26373ccf49e", "row_index": 392, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad54416-cf10-438a-b2e9-c26373ccf49e", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99555cec-44ab-4eb8-8198-fae973e5e700", "record_id": "flaws_cloudtrail:0000393:99555cec-44ab-4eb8-8198-fae973e5e700", "row_index": 393, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99555cec-44ab-4eb8-8198-fae973e5e700", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c051663cc-c5f9-41f7-b96f-6093521d517b", "record_id": "flaws_cloudtrail:0000394:c051663cc-c5f9-41f7-b96f-6093521d517b", "row_index": 394, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c051663cc-c5f9-41f7-b96f-6093521d517b", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "record_id": "flaws_cloudtrail:0000395:1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "row_index": 395, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f51457d-d01a-4094-8d2a-6d4c45f5a8b8", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91514d5-fbda-4b53-bf4e-976ae184bd64", "record_id": "flaws_cloudtrail:0000396:b91514d5-fbda-4b53-bf4e-976ae184bd64", "row_index": 396, "timestamp": "2019-07-22T17:10:16Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91514d5-fbda-4b53-bf4e-976ae184bd64", "eventTime": "2019-07-22T17:10:16Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c687606b-1196-42b5-be62-ebba5353aa2a", "record_id": "flaws_cloudtrail:0000397:4c687606b-1196-42b5-be62-ebba5353aa2a", "row_index": 397, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c687606b-1196-42b5-be62-ebba5353aa2a", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "516934-4054-4f25-9692-231a76a348cc", "record_id": "flaws_cloudtrail:0000398:516934-4054-4f25-9692-231a76a348cc", "row_index": 398, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "516934-4054-4f25-9692-231a76a348cc", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b61fce0-df5b-4828-b1ef-07798917b5f5", "record_id": "flaws_cloudtrail:0000399:7b61fce0-df5b-4828-b1ef-07798917b5f5", "row_index": 399, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b61fce0-df5b-4828-b1ef-07798917b5f5", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "record_id": "flaws_cloudtrail:0000400:0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "row_index": 400, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec718fba-763b-424a-9c57-7662cb02af46", "record_id": "flaws_cloudtrail:0000401:ec718fba-763b-424a-9c57-7662cb02af46", "row_index": 401, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec718fba-763b-424a-9c57-7662cb02af46", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "record_id": "flaws_cloudtrail:0000402:a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "row_index": 402, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "record_id": "flaws_cloudtrail:0000403:4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "row_index": 403, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "record_id": "flaws_cloudtrail:0000404:737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "row_index": 404, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14c55320-e70e-44c4-86ad-d5bf982f5768", "record_id": "flaws_cloudtrail:0000405:14c55320-e70e-44c4-86ad-d5bf982f5768", "row_index": 405, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14c55320-e70e-44c4-86ad-d5bf982f5768", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f726d5-722d-4c05-819e-1b31bd62a56d", "record_id": "flaws_cloudtrail:0000406:95f726d5-722d-4c05-819e-1b31bd62a56d", "row_index": 406, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f726d5-722d-4c05-819e-1b31bd62a56d", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d0e953-492c-496d-892b-82f41719a6a8", "record_id": "flaws_cloudtrail:0000407:f8d0e953-492c-496d-892b-82f41719a6a8", "row_index": 407, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d0e953-492c-496d-892b-82f41719a6a8", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "record_id": "flaws_cloudtrail:0000408:80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "row_index": 408, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e094d23-1d73-4afd-ad2e-eae689fd4360", "record_id": "flaws_cloudtrail:0000409:5e094d23-1d73-4afd-ad2e-eae689fd4360", "row_index": 409, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e094d23-1d73-4afd-ad2e-eae689fd4360", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d7220f-d348-4835-a013-2c5114de3937", "record_id": "flaws_cloudtrail:0000410:c5d7220f-d348-4835-a013-2c5114de3937", "row_index": 410, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d7220f-d348-4835-a013-2c5114de3937", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3cbf814-1212-4767-a1b5-5bdc566efc91", "record_id": "flaws_cloudtrail:0000411:e3cbf814-1212-4767-a1b5-5bdc566efc91", "row_index": 411, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3cbf814-1212-4767-a1b5-5bdc566efc91", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855b39d2-cf66-4473-95f6-19fac0c100427", "record_id": "flaws_cloudtrail:0000412:855b39d2-cf66-4473-95f6-19fac0c100427", "row_index": 412, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855b39d2-cf66-4473-95f6-19fac0c100427", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c687606b-1196-42b5-be62-ebba5353aa2a", "record_id": "flaws_cloudtrail:0000413:4c687606b-1196-42b5-be62-ebba5353aa2a", "row_index": 413, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c687606b-1196-42b5-be62-ebba5353aa2a", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "516934-4054-4f25-9692-231a76a348cc", "record_id": "flaws_cloudtrail:0000414:516934-4054-4f25-9692-231a76a348cc", "row_index": 414, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "516934-4054-4f25-9692-231a76a348cc", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b61fce0-df5b-4828-b1ef-07798917b5f5", "record_id": "flaws_cloudtrail:0000415:7b61fce0-df5b-4828-b1ef-07798917b5f5", "row_index": 415, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b61fce0-df5b-4828-b1ef-07798917b5f5", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "record_id": "flaws_cloudtrail:0000416:0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "row_index": 416, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cd0f8d9-248e-4d3e-abbd-83feec0b8567", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec718fba-763b-424a-9c57-7662cb02af46", "record_id": "flaws_cloudtrail:0000417:ec718fba-763b-424a-9c57-7662cb02af46", "row_index": 417, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec718fba-763b-424a-9c57-7662cb02af46", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "record_id": "flaws_cloudtrail:0000418:a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "row_index": 418, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6b0ff00-619b-43a2-a6cd-acc7fff71b88", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "record_id": "flaws_cloudtrail:0000419:4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "row_index": 419, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3ccbd7-1fd7-4079-876f-a9a59ac689d4", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "record_id": "flaws_cloudtrail:0000420:737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "row_index": 420, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737e8bfc-a48d-4d7d-80a3-e6b3eff9452c", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14c55320-e70e-44c4-86ad-d5bf982f5768", "record_id": "flaws_cloudtrail:0000421:14c55320-e70e-44c4-86ad-d5bf982f5768", "row_index": 421, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14c55320-e70e-44c4-86ad-d5bf982f5768", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95f726d5-722d-4c05-819e-1b31bd62a56d", "record_id": "flaws_cloudtrail:0000422:95f726d5-722d-4c05-819e-1b31bd62a56d", "row_index": 422, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95f726d5-722d-4c05-819e-1b31bd62a56d", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d0e953-492c-496d-892b-82f41719a6a8", "record_id": "flaws_cloudtrail:0000423:f8d0e953-492c-496d-892b-82f41719a6a8", "row_index": 423, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d0e953-492c-496d-892b-82f41719a6a8", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "record_id": "flaws_cloudtrail:0000424:80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "row_index": 424, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a3b7d9-ce3c-47df-b88b-58d4aab4273e", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e094d23-1d73-4afd-ad2e-eae689fd4360", "record_id": "flaws_cloudtrail:0000425:5e094d23-1d73-4afd-ad2e-eae689fd4360", "row_index": 425, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e094d23-1d73-4afd-ad2e-eae689fd4360", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d7220f-d348-4835-a013-2c5114de3937", "record_id": "flaws_cloudtrail:0000426:c5d7220f-d348-4835-a013-2c5114de3937", "row_index": 426, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d7220f-d348-4835-a013-2c5114de3937", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3cbf814-1212-4767-a1b5-5bdc566efc91", "record_id": "flaws_cloudtrail:0000427:e3cbf814-1212-4767-a1b5-5bdc566efc91", "row_index": 427, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3cbf814-1212-4767-a1b5-5bdc566efc91", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "855b39d2-cf66-4473-95f6-19fac0c100427", "record_id": "flaws_cloudtrail:0000428:855b39d2-cf66-4473-95f6-19fac0c100427", "row_index": 428, "timestamp": "2019-07-22T17:10:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "855b39d2-cf66-4473-95f6-19fac0c100427", "eventTime": "2019-07-22T17:10:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31779bf8-9665-4ad9-9119-82da3a9095bf", "record_id": "flaws_cloudtrail:0000429:31779bf8-9665-4ad9-9119-82da3a9095bf", "row_index": 429, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31779bf8-9665-4ad9-9119-82da3a9095bf", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e09978b7-eed0-4ae1-a6aa-6555272a5b65", "record_id": "flaws_cloudtrail:0000430:e09978b7-eed0-4ae1-a6aa-6555272a5b65", "row_index": 430, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e09978b7-eed0-4ae1-a6aa-6555272a5b65", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979c02d4-1f27-487f-a707-c426f7dd59b5", "record_id": "flaws_cloudtrail:0000431:979c02d4-1f27-487f-a707-c426f7dd59b5", "row_index": 431, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979c02d4-1f27-487f-a707-c426f7dd59b5", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d43102-f8ff-457c-853c-dad066523f3c", "record_id": "flaws_cloudtrail:0000432:5d43102-f8ff-457c-853c-dad066523f3c", "row_index": 432, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d43102-f8ff-457c-853c-dad066523f3c", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18344-0640-4a8c-97c7-d49a7ff7b0a4", "record_id": "flaws_cloudtrail:0000433:18344-0640-4a8c-97c7-d49a7ff7b0a4", "row_index": 433, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18344-0640-4a8c-97c7-d49a7ff7b0a4", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af907aef-e83d-47da-a6e5-b37f5eec48cc", "record_id": "flaws_cloudtrail:0000434:af907aef-e83d-47da-a6e5-b37f5eec48cc", "row_index": 434, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af907aef-e83d-47da-a6e5-b37f5eec48cc", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b7d088e-3f40-442d-91fe-ea7f2566380b", "record_id": "flaws_cloudtrail:0000435:6b7d088e-3f40-442d-91fe-ea7f2566380b", "row_index": 435, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b7d088e-3f40-442d-91fe-ea7f2566380b", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed974678-dd5e-47a4-ac9b-5308c6056f11", "record_id": "flaws_cloudtrail:0000436:bed974678-dd5e-47a4-ac9b-5308c6056f11", "row_index": 436, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed974678-dd5e-47a4-ac9b-5308c6056f11", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5263e07c-549b-457d-b172-58c35b699a23", "record_id": "flaws_cloudtrail:0000437:5263e07c-549b-457d-b172-58c35b699a23", "row_index": 437, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5263e07c-549b-457d-b172-58c35b699a23", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3fc9d19-8f7a-478f-b5de-c233db9327db", "record_id": "flaws_cloudtrail:0000438:a3fc9d19-8f7a-478f-b5de-c233db9327db", "row_index": 438, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3fc9d19-8f7a-478f-b5de-c233db9327db", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a56313c-304c-47c7-9d69-aec51fdda3d1", "record_id": "flaws_cloudtrail:0000439:a56313c-304c-47c7-9d69-aec51fdda3d1", "row_index": 439, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a56313c-304c-47c7-9d69-aec51fdda3d1", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d518f749-650b-474c-8865-6bba24a673518", "record_id": "flaws_cloudtrail:0000440:d518f749-650b-474c-8865-6bba24a673518", "row_index": 440, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d518f749-650b-474c-8865-6bba24a673518", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "record_id": "flaws_cloudtrail:0000441:c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "row_index": 441, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48acba2a-f1c6-49ae-a243-ef4a82717e6", "record_id": "flaws_cloudtrail:0000442:48acba2a-f1c6-49ae-a243-ef4a82717e6", "row_index": 442, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48acba2a-f1c6-49ae-a243-ef4a82717e6", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a91d2d7-6f22-4512-b242-bcc090519c22a", "record_id": "flaws_cloudtrail:0000443:6a91d2d7-6f22-4512-b242-bcc090519c22a", "row_index": 443, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a91d2d7-6f22-4512-b242-bcc090519c22a", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31779bf8-9665-4ad9-9119-82da3a9095bf", "record_id": "flaws_cloudtrail:0000444:31779bf8-9665-4ad9-9119-82da3a9095bf", "row_index": 444, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31779bf8-9665-4ad9-9119-82da3a9095bf", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e09978b7-eed0-4ae1-a6aa-6555272a5b65", "record_id": "flaws_cloudtrail:0000445:e09978b7-eed0-4ae1-a6aa-6555272a5b65", "row_index": 445, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e09978b7-eed0-4ae1-a6aa-6555272a5b65", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979c02d4-1f27-487f-a707-c426f7dd59b5", "record_id": "flaws_cloudtrail:0000446:979c02d4-1f27-487f-a707-c426f7dd59b5", "row_index": 446, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979c02d4-1f27-487f-a707-c426f7dd59b5", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d43102-f8ff-457c-853c-dad066523f3c", "record_id": "flaws_cloudtrail:0000447:5d43102-f8ff-457c-853c-dad066523f3c", "row_index": 447, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d43102-f8ff-457c-853c-dad066523f3c", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18344-0640-4a8c-97c7-d49a7ff7b0a4", "record_id": "flaws_cloudtrail:0000448:18344-0640-4a8c-97c7-d49a7ff7b0a4", "row_index": 448, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18344-0640-4a8c-97c7-d49a7ff7b0a4", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af907aef-e83d-47da-a6e5-b37f5eec48cc", "record_id": "flaws_cloudtrail:0000449:af907aef-e83d-47da-a6e5-b37f5eec48cc", "row_index": 449, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af907aef-e83d-47da-a6e5-b37f5eec48cc", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b7d088e-3f40-442d-91fe-ea7f2566380b", "record_id": "flaws_cloudtrail:0000450:6b7d088e-3f40-442d-91fe-ea7f2566380b", "row_index": 450, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b7d088e-3f40-442d-91fe-ea7f2566380b", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed974678-dd5e-47a4-ac9b-5308c6056f11", "record_id": "flaws_cloudtrail:0000451:bed974678-dd5e-47a4-ac9b-5308c6056f11", "row_index": 451, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed974678-dd5e-47a4-ac9b-5308c6056f11", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5263e07c-549b-457d-b172-58c35b699a23", "record_id": "flaws_cloudtrail:0000452:5263e07c-549b-457d-b172-58c35b699a23", "row_index": 452, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5263e07c-549b-457d-b172-58c35b699a23", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3fc9d19-8f7a-478f-b5de-c233db9327db", "record_id": "flaws_cloudtrail:0000453:a3fc9d19-8f7a-478f-b5de-c233db9327db", "row_index": 453, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3fc9d19-8f7a-478f-b5de-c233db9327db", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a56313c-304c-47c7-9d69-aec51fdda3d1", "record_id": "flaws_cloudtrail:0000454:a56313c-304c-47c7-9d69-aec51fdda3d1", "row_index": 454, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a56313c-304c-47c7-9d69-aec51fdda3d1", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d518f749-650b-474c-8865-6bba24a673518", "record_id": "flaws_cloudtrail:0000455:d518f749-650b-474c-8865-6bba24a673518", "row_index": 455, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d518f749-650b-474c-8865-6bba24a673518", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "record_id": "flaws_cloudtrail:0000456:c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "row_index": 456, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c89a1b-dbcc-4c53-8aa8-595848f41f998", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48acba2a-f1c6-49ae-a243-ef4a82717e6", "record_id": "flaws_cloudtrail:0000457:48acba2a-f1c6-49ae-a243-ef4a82717e6", "row_index": 457, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48acba2a-f1c6-49ae-a243-ef4a82717e6", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a91d2d7-6f22-4512-b242-bcc090519c22a", "record_id": "flaws_cloudtrail:0000458:6a91d2d7-6f22-4512-b242-bcc090519c22a", "row_index": 458, "timestamp": "2019-07-22T17:10:18Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a91d2d7-6f22-4512-b242-bcc090519c22a", "eventTime": "2019-07-22T17:10:18Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f30d9ae9-b42e-425b-8877-523dbc8b44c3", "record_id": "flaws_cloudtrail:0000459:f30d9ae9-b42e-425b-8877-523dbc8b44c3", "row_index": 459, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f30d9ae9-b42e-425b-8877-523dbc8b44c3", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "record_id": "flaws_cloudtrail:0000460:9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "row_index": 460, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e722784-155f-49e3-b015-44b77f9c6b40", "record_id": "flaws_cloudtrail:0000461:5e722784-155f-49e3-b015-44b77f9c6b40", "row_index": 461, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e722784-155f-49e3-b015-44b77f9c6b40", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142f6fe8-0ef0-4754-9ac4-0cc505254ba", "record_id": "flaws_cloudtrail:0000462:142f6fe8-0ef0-4754-9ac4-0cc505254ba", "row_index": 462, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142f6fe8-0ef0-4754-9ac4-0cc505254ba", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "record_id": "flaws_cloudtrail:0000463:fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "row_index": 463, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "record_id": "flaws_cloudtrail:0000464:9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "row_index": 464, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe6d2f27-1f1d-425e-9c7d-700d0417612a", "record_id": "flaws_cloudtrail:0000465:fe6d2f27-1f1d-425e-9c7d-700d0417612a", "row_index": 465, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe6d2f27-1f1d-425e-9c7d-700d0417612a", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "record_id": "flaws_cloudtrail:0000466:5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "row_index": 466, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f30d9ae9-b42e-425b-8877-523dbc8b44c3", "record_id": "flaws_cloudtrail:0000467:f30d9ae9-b42e-425b-8877-523dbc8b44c3", "row_index": 467, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f30d9ae9-b42e-425b-8877-523dbc8b44c3", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "record_id": "flaws_cloudtrail:0000468:9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "row_index": 468, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d34cfbe-589a-4087-81d5-bf1e9a0a0590", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e722784-155f-49e3-b015-44b77f9c6b40", "record_id": "flaws_cloudtrail:0000469:5e722784-155f-49e3-b015-44b77f9c6b40", "row_index": 469, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e722784-155f-49e3-b015-44b77f9c6b40", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142f6fe8-0ef0-4754-9ac4-0cc505254ba", "record_id": "flaws_cloudtrail:0000470:142f6fe8-0ef0-4754-9ac4-0cc505254ba", "row_index": 470, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142f6fe8-0ef0-4754-9ac4-0cc505254ba", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "record_id": "flaws_cloudtrail:0000471:fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "row_index": 471, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbc5cdcb-1641-4c4c-b8e5-958e2ec7af0f", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "record_id": "flaws_cloudtrail:0000472:9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "row_index": 472, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a2e5c50-6b7b-44a3-8453-ae324d5d3aa7", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe6d2f27-1f1d-425e-9c7d-700d0417612a", "record_id": "flaws_cloudtrail:0000473:fe6d2f27-1f1d-425e-9c7d-700d0417612a", "row_index": 473, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe6d2f27-1f1d-425e-9c7d-700d0417612a", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "record_id": "flaws_cloudtrail:0000474:5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "row_index": 474, "timestamp": "2019-07-22T17:10:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2c645f-1ce2-435c-a93b-9bc319a11bbb", "eventTime": "2019-07-22T17:10:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "record_id": "flaws_cloudtrail:0000475:52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "row_index": 475, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb19546c-ece4-48c1-a63e-ed764d3fc454", "record_id": "flaws_cloudtrail:0000476:cb19546c-ece4-48c1-a63e-ed764d3fc454", "row_index": 476, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb19546c-ece4-48c1-a63e-ed764d3fc454", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ea5731-86a5-495b-9b6e-b3111a8e9595", "record_id": "flaws_cloudtrail:0000477:c8ea5731-86a5-495b-9b6e-b3111a8e9595", "row_index": 477, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ea5731-86a5-495b-9b6e-b3111a8e9595", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "345a2f86-b02b-47f7-9b82-0b52945edd7", "record_id": "flaws_cloudtrail:0000478:345a2f86-b02b-47f7-9b82-0b52945edd7", "row_index": 478, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "345a2f86-b02b-47f7-9b82-0b52945edd7", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa0b07e2-87f4-4b28-a142-f806112bee01", "record_id": "flaws_cloudtrail:0000479:aa0b07e2-87f4-4b28-a142-f806112bee01", "row_index": 479, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa0b07e2-87f4-4b28-a142-f806112bee01", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6564b027-8b0d-4fe5-82ab-18867b3ade1a", "record_id": "flaws_cloudtrail:0000480:6564b027-8b0d-4fe5-82ab-18867b3ade1a", "row_index": 480, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6564b027-8b0d-4fe5-82ab-18867b3ade1a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "record_id": "flaws_cloudtrail:0000481:7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "row_index": 481, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "record_id": "flaws_cloudtrail:0000482:1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "row_index": 482, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b7426f4-e855-46fa-ba69-51001f8a17c", "record_id": "flaws_cloudtrail:0000483:7b7426f4-e855-46fa-ba69-51001f8a17c", "row_index": 483, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b7426f4-e855-46fa-ba69-51001f8a17c", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72c853a0-f6ff-4a33-a478-654922e8640f", "record_id": "flaws_cloudtrail:0000484:72c853a0-f6ff-4a33-a478-654922e8640f", "row_index": 484, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72c853a0-f6ff-4a33-a478-654922e8640f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "record_id": "flaws_cloudtrail:0000485:393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "row_index": 485, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b795ec-e77b-483a-a15c-8fcff9c4195a", "record_id": "flaws_cloudtrail:0000486:85b795ec-e77b-483a-a15c-8fcff9c4195a", "row_index": 486, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b795ec-e77b-483a-a15c-8fcff9c4195a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccfd289-1920-4768-af08-374d53dcf161", "record_id": "flaws_cloudtrail:0000487:6ccfd289-1920-4768-af08-374d53dcf161", "row_index": 487, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccfd289-1920-4768-af08-374d53dcf161", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3345e3e6-00fc-4667-9e72-70d2020d9e6f", "record_id": "flaws_cloudtrail:0000488:3345e3e6-00fc-4667-9e72-70d2020d9e6f", "row_index": 488, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3345e3e6-00fc-4667-9e72-70d2020d9e6f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51e76e83-b003-45f9-81fa-e8ead425eee2", "record_id": "flaws_cloudtrail:0000489:51e76e83-b003-45f9-81fa-e8ead425eee2", "row_index": 489, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51e76e83-b003-45f9-81fa-e8ead425eee2", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "record_id": "flaws_cloudtrail:0000490:52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "row_index": 490, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52c666f0-a941-4e16-a226-b7bb1cd6a4b3", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb19546c-ece4-48c1-a63e-ed764d3fc454", "record_id": "flaws_cloudtrail:0000491:cb19546c-ece4-48c1-a63e-ed764d3fc454", "row_index": 491, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb19546c-ece4-48c1-a63e-ed764d3fc454", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ea5731-86a5-495b-9b6e-b3111a8e9595", "record_id": "flaws_cloudtrail:0000492:c8ea5731-86a5-495b-9b6e-b3111a8e9595", "row_index": 492, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ea5731-86a5-495b-9b6e-b3111a8e9595", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "345a2f86-b02b-47f7-9b82-0b52945edd7", "record_id": "flaws_cloudtrail:0000493:345a2f86-b02b-47f7-9b82-0b52945edd7", "row_index": 493, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "345a2f86-b02b-47f7-9b82-0b52945edd7", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa0b07e2-87f4-4b28-a142-f806112bee01", "record_id": "flaws_cloudtrail:0000494:aa0b07e2-87f4-4b28-a142-f806112bee01", "row_index": 494, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa0b07e2-87f4-4b28-a142-f806112bee01", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6564b027-8b0d-4fe5-82ab-18867b3ade1a", "record_id": "flaws_cloudtrail:0000495:6564b027-8b0d-4fe5-82ab-18867b3ade1a", "row_index": 495, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6564b027-8b0d-4fe5-82ab-18867b3ade1a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "record_id": "flaws_cloudtrail:0000496:7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "row_index": 496, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd67ef5-b7e0-476c-8c89-4c8d3c97d8da", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "record_id": "flaws_cloudtrail:0000497:1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "row_index": 497, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1acc866c-ff04-4e0f-bcc6-d03a5d88217f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b7426f4-e855-46fa-ba69-51001f8a17c", "record_id": "flaws_cloudtrail:0000498:7b7426f4-e855-46fa-ba69-51001f8a17c", "row_index": 498, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b7426f4-e855-46fa-ba69-51001f8a17c", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72c853a0-f6ff-4a33-a478-654922e8640f", "record_id": "flaws_cloudtrail:0000499:72c853a0-f6ff-4a33-a478-654922e8640f", "row_index": 499, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72c853a0-f6ff-4a33-a478-654922e8640f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "record_id": "flaws_cloudtrail:0000500:393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "row_index": 500, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393c14d6-e4fa-4eb2-9ba3-e698d4ede12a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b795ec-e77b-483a-a15c-8fcff9c4195a", "record_id": "flaws_cloudtrail:0000501:85b795ec-e77b-483a-a15c-8fcff9c4195a", "row_index": 501, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b795ec-e77b-483a-a15c-8fcff9c4195a", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccfd289-1920-4768-af08-374d53dcf161", "record_id": "flaws_cloudtrail:0000502:6ccfd289-1920-4768-af08-374d53dcf161", "row_index": 502, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccfd289-1920-4768-af08-374d53dcf161", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3345e3e6-00fc-4667-9e72-70d2020d9e6f", "record_id": "flaws_cloudtrail:0000503:3345e3e6-00fc-4667-9e72-70d2020d9e6f", "row_index": 503, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3345e3e6-00fc-4667-9e72-70d2020d9e6f", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51e76e83-b003-45f9-81fa-e8ead425eee2", "record_id": "flaws_cloudtrail:0000504:51e76e83-b003-45f9-81fa-e8ead425eee2", "row_index": 504, "timestamp": "2019-07-22T17:10:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51e76e83-b003-45f9-81fa-e8ead425eee2", "eventTime": "2019-07-22T17:10:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1523e79-538c-4a99-bacd-c47e1e4be58f", "record_id": "flaws_cloudtrail:0000505:f1523e79-538c-4a99-bacd-c47e1e4be58f", "row_index": 505, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1523e79-538c-4a99-bacd-c47e1e4be58f", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93f914d-b6d1-41bd-a042-096c74ca55c9", "record_id": "flaws_cloudtrail:0000506:a93f914d-b6d1-41bd-a042-096c74ca55c9", "row_index": 506, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93f914d-b6d1-41bd-a042-096c74ca55c9", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-south-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "record_id": "flaws_cloudtrail:0000507:b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "row_index": 507, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d810f3-6b3c-476f-a67c-d3404551d074", "record_id": "flaws_cloudtrail:0000508:61d810f3-6b3c-476f-a67c-d3404551d074", "row_index": 508, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d810f3-6b3c-476f-a67c-d3404551d074", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ca-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "record_id": "flaws_cloudtrail:0000509:32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "row_index": 509, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "014754d41-eb80-45b9-b0f7-da9d56f55d8e", "record_id": "flaws_cloudtrail:0000510:014754d41-eb80-45b9-b0f7-da9d56f55d8e", "row_index": 510, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "014754d41-eb80-45b9-b0f7-da9d56f55d8e", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "701bdb75-a78b-47de-a36f-66eb1d6aa828", "record_id": "flaws_cloudtrail:0000511:701bdb75-a78b-47de-a36f-66eb1d6aa828", "row_index": 511, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "701bdb75-a78b-47de-a36f-66eb1d6aa828", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "661595b64-0c81-4276-ae94-6a2249b4ead8", "record_id": "flaws_cloudtrail:0000512:661595b64-0c81-4276-ae94-6a2249b4ead8", "row_index": 512, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "661595b64-0c81-4276-ae94-6a2249b4ead8", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-3:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c944ec8-ec7c-412f-83df-a29374d05cdd", "record_id": "flaws_cloudtrail:0000513:5c944ec8-ec7c-412f-83df-a29374d05cdd", "row_index": 513, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c944ec8-ec7c-412f-83df-a29374d05cdd", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee35709-eed0-43e7-84fd-7fa3f3012a0c", "record_id": "flaws_cloudtrail:0000514:ee35709-eed0-43e7-84fd-7fa3f3012a0c", "row_index": 514, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee35709-eed0-43e7-84fd-7fa3f3012a0c", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72d15cd-8eea-4683-93a8-03d853724d410", "record_id": "flaws_cloudtrail:0000515:b72d15cd-8eea-4683-93a8-03d853724d410", "row_index": 515, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72d15cd-8eea-4683-93a8-03d853724d410", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03710f5f-b516-44b2-9a85-06ede90854", "record_id": "flaws_cloudtrail:0000516:03710f5f-b516-44b2-9a85-06ede90854", "row_index": 516, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03710f5f-b516-44b2-9a85-06ede90854", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfbea21a-2316-40cc-84e6-d91fffd923c5", "record_id": "flaws_cloudtrail:0000517:bfbea21a-2316-40cc-84e6-d91fffd923c5", "row_index": 517, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfbea21a-2316-40cc-84e6-d91fffd923c5", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fca6d44-46f9-42c4-a11d-f0370016faad", "record_id": "flaws_cloudtrail:0000518:2fca6d44-46f9-42c4-a11d-f0370016faad", "row_index": 518, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fca6d44-46f9-42c4-a11d-f0370016faad", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1523e79-538c-4a99-bacd-c47e1e4be58f", "record_id": "flaws_cloudtrail:0000519:f1523e79-538c-4a99-bacd-c47e1e4be58f", "row_index": 519, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1523e79-538c-4a99-bacd-c47e1e4be58f", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93f914d-b6d1-41bd-a042-096c74ca55c9", "record_id": "flaws_cloudtrail:0000520:a93f914d-b6d1-41bd-a042-096c74ca55c9", "row_index": 520, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 924, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93f914d-b6d1-41bd-a042-096c74ca55c9", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-south-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "record_id": "flaws_cloudtrail:0000521:b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "row_index": 521, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3fa7e16-8df0-4028-9a6f-3c07b57ad6c2", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d810f3-6b3c-476f-a67c-d3404551d074", "record_id": "flaws_cloudtrail:0000522:61d810f3-6b3c-476f-a67c-d3404551d074", "row_index": 522, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d810f3-6b3c-476f-a67c-d3404551d074", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ca-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "record_id": "flaws_cloudtrail:0000523:32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "row_index": 523, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32b0c3a1-cb5d-4b36-a095-d0b276dc10e2", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "014754d41-eb80-45b9-b0f7-da9d56f55d8e", "record_id": "flaws_cloudtrail:0000524:014754d41-eb80-45b9-b0f7-da9d56f55d8e", "row_index": 524, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "014754d41-eb80-45b9-b0f7-da9d56f55d8e", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "701bdb75-a78b-47de-a36f-66eb1d6aa828", "record_id": "flaws_cloudtrail:0000525:701bdb75-a78b-47de-a36f-66eb1d6aa828", "row_index": 525, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "701bdb75-a78b-47de-a36f-66eb1d6aa828", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "661595b64-0c81-4276-ae94-6a2249b4ead8", "record_id": "flaws_cloudtrail:0000526:661595b64-0c81-4276-ae94-6a2249b4ead8", "row_index": 526, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "661595b64-0c81-4276-ae94-6a2249b4ead8", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-3:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c944ec8-ec7c-412f-83df-a29374d05cdd", "record_id": "flaws_cloudtrail:0000527:5c944ec8-ec7c-412f-83df-a29374d05cdd", "row_index": 527, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c944ec8-ec7c-412f-83df-a29374d05cdd", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee35709-eed0-43e7-84fd-7fa3f3012a0c", "record_id": "flaws_cloudtrail:0000528:ee35709-eed0-43e7-84fd-7fa3f3012a0c", "row_index": 528, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee35709-eed0-43e7-84fd-7fa3f3012a0c", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72d15cd-8eea-4683-93a8-03d853724d410", "record_id": "flaws_cloudtrail:0000529:b72d15cd-8eea-4683-93a8-03d853724d410", "row_index": 529, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72d15cd-8eea-4683-93a8-03d853724d410", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03710f5f-b516-44b2-9a85-06ede90854", "record_id": "flaws_cloudtrail:0000530:03710f5f-b516-44b2-9a85-06ede90854", "row_index": 530, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03710f5f-b516-44b2-9a85-06ede90854", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfbea21a-2316-40cc-84e6-d91fffd923c5", "record_id": "flaws_cloudtrail:0000531:bfbea21a-2316-40cc-84e6-d91fffd923c5", "row_index": 531, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfbea21a-2316-40cc-84e6-d91fffd923c5", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fca6d44-46f9-42c4-a11d-f0370016faad", "record_id": "flaws_cloudtrail:0000532:2fca6d44-46f9-42c4-a11d-f0370016faad", "row_index": 532, "timestamp": "2019-07-22T17:10:21Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 923, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fca6d44-46f9-42c4-a11d-f0370016faad", "eventTime": "2019-07-22T17:10:21Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1c88aa-5465-4892-aa76-349749b90f34", "record_id": "flaws_cloudtrail:0000533:3a1c88aa-5465-4892-aa76-349749b90f34", "row_index": 533, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1c88aa-5465-4892-aa76-349749b90f34", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76177-342a-44f7-a421-42660a4c", "record_id": "flaws_cloudtrail:0000534:76177-342a-44f7-a421-42660a4c", "row_index": 534, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76177-342a-44f7-a421-42660a4c", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c591cdff-7671-4d2d-b830-3e02b3c1bd40", "record_id": "flaws_cloudtrail:0000535:c591cdff-7671-4d2d-b830-3e02b3c1bd40", "row_index": 535, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c591cdff-7671-4d2d-b830-3e02b3c1bd40", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef158177-bd6a-4e31-8850-3b394debd42a", "record_id": "flaws_cloudtrail:0000536:eef158177-bd6a-4e31-8850-3b394debd42a", "row_index": 536, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef158177-bd6a-4e31-8850-3b394debd42a", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8b6cb52-d90e-4aa6-a944-095658ab627", "record_id": "flaws_cloudtrail:0000537:a8b6cb52-d90e-4aa6-a944-095658ab627", "row_index": 537, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8b6cb52-d90e-4aa6-a944-095658ab627", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d6a1c5-baee-4634-b8d6-80b2367c41b1", "record_id": "flaws_cloudtrail:0000538:19d6a1c5-baee-4634-b8d6-80b2367c41b1", "row_index": 538, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d6a1c5-baee-4634-b8d6-80b2367c41b1", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae91649-7e6d-4f43-a797-129787b4bdc3", "record_id": "flaws_cloudtrail:0000539:ae91649-7e6d-4f43-a797-129787b4bdc3", "row_index": 539, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae91649-7e6d-4f43-a797-129787b4bdc3", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a70465-5f34-420e-b6b1-e5c823d9755b", "record_id": "flaws_cloudtrail:0000540:8a70465-5f34-420e-b6b1-e5c823d9755b", "row_index": 540, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a70465-5f34-420e-b6b1-e5c823d9755b", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a2e94a-308e-4312-b4e2-ad05a20d228c", "record_id": "flaws_cloudtrail:0000541:d4a2e94a-308e-4312-b4e2-ad05a20d228c", "row_index": 541, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a2e94a-308e-4312-b4e2-ad05a20d228c", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "record_id": "flaws_cloudtrail:0000542:2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "row_index": 542, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ead141ce-e39c-4bcc-9783-5a772612f", "record_id": "flaws_cloudtrail:0000543:ead141ce-e39c-4bcc-9783-5a772612f", "row_index": 543, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ead141ce-e39c-4bcc-9783-5a772612f", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1c88aa-5465-4892-aa76-349749b90f34", "record_id": "flaws_cloudtrail:0000544:3a1c88aa-5465-4892-aa76-349749b90f34", "row_index": 544, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1c88aa-5465-4892-aa76-349749b90f34", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76177-342a-44f7-a421-42660a4c", "record_id": "flaws_cloudtrail:0000545:76177-342a-44f7-a421-42660a4c", "row_index": 545, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76177-342a-44f7-a421-42660a4c", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c591cdff-7671-4d2d-b830-3e02b3c1bd40", "record_id": "flaws_cloudtrail:0000546:c591cdff-7671-4d2d-b830-3e02b3c1bd40", "row_index": 546, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c591cdff-7671-4d2d-b830-3e02b3c1bd40", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef158177-bd6a-4e31-8850-3b394debd42a", "record_id": "flaws_cloudtrail:0000547:eef158177-bd6a-4e31-8850-3b394debd42a", "row_index": 547, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef158177-bd6a-4e31-8850-3b394debd42a", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8b6cb52-d90e-4aa6-a944-095658ab627", "record_id": "flaws_cloudtrail:0000548:a8b6cb52-d90e-4aa6-a944-095658ab627", "row_index": 548, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8b6cb52-d90e-4aa6-a944-095658ab627", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19d6a1c5-baee-4634-b8d6-80b2367c41b1", "record_id": "flaws_cloudtrail:0000549:19d6a1c5-baee-4634-b8d6-80b2367c41b1", "row_index": 549, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19d6a1c5-baee-4634-b8d6-80b2367c41b1", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae91649-7e6d-4f43-a797-129787b4bdc3", "record_id": "flaws_cloudtrail:0000550:ae91649-7e6d-4f43-a797-129787b4bdc3", "row_index": 550, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae91649-7e6d-4f43-a797-129787b4bdc3", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a70465-5f34-420e-b6b1-e5c823d9755b", "record_id": "flaws_cloudtrail:0000551:8a70465-5f34-420e-b6b1-e5c823d9755b", "row_index": 551, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a70465-5f34-420e-b6b1-e5c823d9755b", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a2e94a-308e-4312-b4e2-ad05a20d228c", "record_id": "flaws_cloudtrail:0000552:d4a2e94a-308e-4312-b4e2-ad05a20d228c", "row_index": 552, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a2e94a-308e-4312-b4e2-ad05a20d228c", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "record_id": "flaws_cloudtrail:0000553:2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "row_index": 553, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1c230f-cb99-4ac6-8d24-e131206eaad8f", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ead141ce-e39c-4bcc-9783-5a772612f", "record_id": "flaws_cloudtrail:0000554:ead141ce-e39c-4bcc-9783-5a772612f", "row_index": 554, "timestamp": "2019-07-22T17:10:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ead141ce-e39c-4bcc-9783-5a772612f", "eventTime": "2019-07-22T17:10:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b0c110-f563-4840-acd5-786675cbb0", "record_id": "flaws_cloudtrail:0000555:b5b0c110-f563-4840-acd5-786675cbb0", "row_index": 555, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b0c110-f563-4840-acd5-786675cbb0", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4034f8fc-33c1-46be-be60-d3abee0db948", "record_id": "flaws_cloudtrail:0000556:4034f8fc-33c1-46be-be60-d3abee0db948", "row_index": 556, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4034f8fc-33c1-46be-be60-d3abee0db948", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f099519-529a-46a9-a95a-49483ef01945", "record_id": "flaws_cloudtrail:0000557:6f099519-529a-46a9-a95a-49483ef01945", "row_index": 557, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f099519-529a-46a9-a95a-49483ef01945", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "record_id": "flaws_cloudtrail:0000558:6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "row_index": 558, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f262b3-b900-41f0-8899-5f1c4ff353c5", "record_id": "flaws_cloudtrail:0000559:68f262b3-b900-41f0-8899-5f1c4ff353c5", "row_index": 559, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f262b3-b900-41f0-8899-5f1c4ff353c5", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a21941-8123-45ff-a38e-fe154c2c6d34", "record_id": "flaws_cloudtrail:0000560:a21941-8123-45ff-a38e-fe154c2c6d34", "row_index": 560, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a21941-8123-45ff-a38e-fe154c2c6d34", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f526121-8eef-4ba3-ab17-8bd24f7c47da", "record_id": "flaws_cloudtrail:0000561:6f526121-8eef-4ba3-ab17-8bd24f7c47da", "row_index": 561, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f526121-8eef-4ba3-ab17-8bd24f7c47da", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6930e7f5-7ee4-4e34-8a19-62faa34ba514", "record_id": "flaws_cloudtrail:0000562:6930e7f5-7ee4-4e34-8a19-62faa34ba514", "row_index": 562, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6930e7f5-7ee4-4e34-8a19-62faa34ba514", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "768796-6c4c-4de2-9a63-e28f05a138c4", "record_id": "flaws_cloudtrail:0000563:768796-6c4c-4de2-9a63-e28f05a138c4", "row_index": 563, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "768796-6c4c-4de2-9a63-e28f05a138c4", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5174a7-079e-48fd-98ef-a9beec186a03", "record_id": "flaws_cloudtrail:0000564:7a5174a7-079e-48fd-98ef-a9beec186a03", "row_index": 564, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5174a7-079e-48fd-98ef-a9beec186a03", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14b2476-4ce6-425c-9150-74b74e538a3b", "record_id": "flaws_cloudtrail:0000565:e14b2476-4ce6-425c-9150-74b74e538a3b", "row_index": 565, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14b2476-4ce6-425c-9150-74b74e538a3b", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bb0303-0f19-4789-a702-3c453836f13ab", "record_id": "flaws_cloudtrail:0000566:e2bb0303-0f19-4789-a702-3c453836f13ab", "row_index": 566, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bb0303-0f19-4789-a702-3c453836f13ab", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53domains:ListDomains on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "record_id": "flaws_cloudtrail:0000567:550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "row_index": 567, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b0c110-f563-4840-acd5-786675cbb0", "record_id": "flaws_cloudtrail:0000568:b5b0c110-f563-4840-acd5-786675cbb0", "row_index": 568, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b0c110-f563-4840-acd5-786675cbb0", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4034f8fc-33c1-46be-be60-d3abee0db948", "record_id": "flaws_cloudtrail:0000569:4034f8fc-33c1-46be-be60-d3abee0db948", "row_index": 569, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4034f8fc-33c1-46be-be60-d3abee0db948", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f099519-529a-46a9-a95a-49483ef01945", "record_id": "flaws_cloudtrail:0000570:6f099519-529a-46a9-a95a-49483ef01945", "row_index": 570, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f099519-529a-46a9-a95a-49483ef01945", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "record_id": "flaws_cloudtrail:0000571:6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "row_index": 571, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9f56c8-51f7-4e4e-ba88-1fd130ec1be9", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f262b3-b900-41f0-8899-5f1c4ff353c5", "record_id": "flaws_cloudtrail:0000572:68f262b3-b900-41f0-8899-5f1c4ff353c5", "row_index": 572, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f262b3-b900-41f0-8899-5f1c4ff353c5", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a21941-8123-45ff-a38e-fe154c2c6d34", "record_id": "flaws_cloudtrail:0000573:a21941-8123-45ff-a38e-fe154c2c6d34", "row_index": 573, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a21941-8123-45ff-a38e-fe154c2c6d34", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f526121-8eef-4ba3-ab17-8bd24f7c47da", "record_id": "flaws_cloudtrail:0000574:6f526121-8eef-4ba3-ab17-8bd24f7c47da", "row_index": 574, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f526121-8eef-4ba3-ab17-8bd24f7c47da", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6930e7f5-7ee4-4e34-8a19-62faa34ba514", "record_id": "flaws_cloudtrail:0000575:6930e7f5-7ee4-4e34-8a19-62faa34ba514", "row_index": 575, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6930e7f5-7ee4-4e34-8a19-62faa34ba514", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "768796-6c4c-4de2-9a63-e28f05a138c4", "record_id": "flaws_cloudtrail:0000576:768796-6c4c-4de2-9a63-e28f05a138c4", "row_index": 576, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "768796-6c4c-4de2-9a63-e28f05a138c4", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5174a7-079e-48fd-98ef-a9beec186a03", "record_id": "flaws_cloudtrail:0000577:7a5174a7-079e-48fd-98ef-a9beec186a03", "row_index": 577, "timestamp": "2019-07-22T17:10:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5174a7-079e-48fd-98ef-a9beec186a03", "eventTime": "2019-07-22T17:10:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14b2476-4ce6-425c-9150-74b74e538a3b", "record_id": "flaws_cloudtrail:0000578:e14b2476-4ce6-425c-9150-74b74e538a3b", "row_index": 578, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14b2476-4ce6-425c-9150-74b74e538a3b", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bb0303-0f19-4789-a702-3c453836f13ab", "record_id": "flaws_cloudtrail:0000579:e2bb0303-0f19-4789-a702-3c453836f13ab", "row_index": 579, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bb0303-0f19-4789-a702-3c453836f13ab", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53domains:ListDomains on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "record_id": "flaws_cloudtrail:0000580:550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "row_index": 580, "timestamp": "2019-07-22T17:10:23Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550b92d9-59a5-4b9b-9f52-14b3a4693e8f", "eventTime": "2019-07-22T17:10:23Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45826c7-f71c-4eb8-88b0-415e7495ce4a", "record_id": "flaws_cloudtrail:0000581:45826c7-f71c-4eb8-88b0-415e7495ce4a", "row_index": 581, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45826c7-f71c-4eb8-88b0-415e7495ce4a", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c2bd14-b209-43bb-87ec-6f41c5044965", "record_id": "flaws_cloudtrail:0000582:a6c2bd14-b209-43bb-87ec-6f41c5044965", "row_index": 582, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c2bd14-b209-43bb-87ec-6f41c5044965", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75dca185-cd40-4920-8e6c-fb85a101c376", "record_id": "flaws_cloudtrail:0000583:75dca185-cd40-4920-8e6c-fb85a101c376", "row_index": 583, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75dca185-cd40-4920-8e6c-fb85a101c376", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a463d70c-97bc-436a-913d-eda3bea65a50", "record_id": "flaws_cloudtrail:0000584:a463d70c-97bc-436a-913d-eda3bea65a50", "row_index": 584, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a463d70c-97bc-436a-913d-eda3bea65a50", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "record_id": "flaws_cloudtrail:0000585:7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "row_index": 585, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dce33d7-593a-4511-8fff-58fbc32d665c", "record_id": "flaws_cloudtrail:0000586:3dce33d7-593a-4511-8fff-58fbc32d665c", "row_index": 586, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dce33d7-593a-4511-8fff-58fbc32d665c", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "record_id": "flaws_cloudtrail:0000587:b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "row_index": 587, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985aabce-15dc-42a7-91ca-0b9f09ac86ce", "record_id": "flaws_cloudtrail:0000588:985aabce-15dc-42a7-91ca-0b9f09ac86ce", "row_index": 588, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985aabce-15dc-42a7-91ca-0b9f09ac86ce", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee90a2e4-486d-47e1-ba66-808f42275f29", "record_id": "flaws_cloudtrail:0000589:ee90a2e4-486d-47e1-ba66-808f42275f29", "row_index": 589, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee90a2e4-486d-47e1-ba66-808f42275f29", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c592efab-d98a-4888-a9a2-30f448139ca", "record_id": "flaws_cloudtrail:0000590:c592efab-d98a-4888-a9a2-30f448139ca", "row_index": 590, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c592efab-d98a-4888-a9a2-30f448139ca", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd27ff19-6ad2-477f-bbba-3f08630871e6", "record_id": "flaws_cloudtrail:0000591:cd27ff19-6ad2-477f-bbba-3f08630871e6", "row_index": 591, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd27ff19-6ad2-477f-bbba-3f08630871e6", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e9631d-c4be-413c-bc48-4df845a5c06b", "record_id": "flaws_cloudtrail:0000592:d6e9631d-c4be-413c-bc48-4df845a5c06b", "row_index": 592, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e9631d-c4be-413c-bc48-4df845a5c06b", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45826c7-f71c-4eb8-88b0-415e7495ce4a", "record_id": "flaws_cloudtrail:0000593:45826c7-f71c-4eb8-88b0-415e7495ce4a", "row_index": 593, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45826c7-f71c-4eb8-88b0-415e7495ce4a", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c2bd14-b209-43bb-87ec-6f41c5044965", "record_id": "flaws_cloudtrail:0000594:a6c2bd14-b209-43bb-87ec-6f41c5044965", "row_index": 594, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c2bd14-b209-43bb-87ec-6f41c5044965", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75dca185-cd40-4920-8e6c-fb85a101c376", "record_id": "flaws_cloudtrail:0000595:75dca185-cd40-4920-8e6c-fb85a101c376", "row_index": 595, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75dca185-cd40-4920-8e6c-fb85a101c376", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a463d70c-97bc-436a-913d-eda3bea65a50", "record_id": "flaws_cloudtrail:0000596:a463d70c-97bc-436a-913d-eda3bea65a50", "row_index": 596, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a463d70c-97bc-436a-913d-eda3bea65a50", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "record_id": "flaws_cloudtrail:0000597:7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "row_index": 597, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffc23e0-d68f-40d9-91e4-dde51cd2f89b", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dce33d7-593a-4511-8fff-58fbc32d665c", "record_id": "flaws_cloudtrail:0000598:3dce33d7-593a-4511-8fff-58fbc32d665c", "row_index": 598, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dce33d7-593a-4511-8fff-58fbc32d665c", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "record_id": "flaws_cloudtrail:0000599:b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "row_index": 599, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7be2b5e-ebdc-4810-a761-e01b6d3f1596", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985aabce-15dc-42a7-91ca-0b9f09ac86ce", "record_id": "flaws_cloudtrail:0000600:985aabce-15dc-42a7-91ca-0b9f09ac86ce", "row_index": 600, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985aabce-15dc-42a7-91ca-0b9f09ac86ce", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee90a2e4-486d-47e1-ba66-808f42275f29", "record_id": "flaws_cloudtrail:0000601:ee90a2e4-486d-47e1-ba66-808f42275f29", "row_index": 601, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee90a2e4-486d-47e1-ba66-808f42275f29", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c592efab-d98a-4888-a9a2-30f448139ca", "record_id": "flaws_cloudtrail:0000602:c592efab-d98a-4888-a9a2-30f448139ca", "row_index": 602, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c592efab-d98a-4888-a9a2-30f448139ca", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd27ff19-6ad2-477f-bbba-3f08630871e6", "record_id": "flaws_cloudtrail:0000603:cd27ff19-6ad2-477f-bbba-3f08630871e6", "row_index": 603, "timestamp": "2019-07-22T17:10:24Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd27ff19-6ad2-477f-bbba-3f08630871e6", "eventTime": "2019-07-22T17:10:24Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e9631d-c4be-413c-bc48-4df845a5c06b", "record_id": "flaws_cloudtrail:0000604:d6e9631d-c4be-413c-bc48-4df845a5c06b", "row_index": 604, "timestamp": "2019-07-22T17:10:24Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e9631d-c4be-413c-bc48-4df845a5c06b", "eventTime": "2019-07-22T17:10:24Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78df3ee6-3456-498e-85d7-1a03e3b59f58", "record_id": "flaws_cloudtrail:0000605:78df3ee6-3456-498e-85d7-1a03e3b59f58", "row_index": 605, "timestamp": "2019-07-22T17:10:25Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78df3ee6-3456-498e-85d7-1a03e3b59f58", "eventTime": "2019-07-22T17:10:25Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb309f17-411b-49db-9053-af8b6b839b2b", "record_id": "flaws_cloudtrail:0000606:fb309f17-411b-49db-9053-af8b6b839b2b", "row_index": 606, "timestamp": "2019-07-22T17:10:25Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb309f17-411b-49db-9053-af8b6b839b2b", "eventTime": "2019-07-22T17:10:25Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708ca2e9-7b51-48ee-ac4e-ee2ef4674c3d", "record_id": "flaws_cloudtrail:0000607:708ca2e9-7b51-48ee-ac4e-ee2ef4674c3d", "row_index": 607, "timestamp": "2019-07-22T17:10:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708ca2e9-7b51-48ee-ac4e-ee2ef4674c3d", "eventTime": "2019-07-22T17:10:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee28161-5bc0-44ee-b808-13a324f34ec0", "record_id": "flaws_cloudtrail:0000608:ee28161-5bc0-44ee-b808-13a324f34ec0", "row_index": 608, "timestamp": "2019-07-22T17:10:25Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee28161-5bc0-44ee-b808-13a324f34ec0", "eventTime": "2019-07-22T17:10:25Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c212f2d-f46a-4b33-9310-50b8f4dc2f49", "record_id": "flaws_cloudtrail:0000609:4c212f2d-f46a-4b33-9310-50b8f4dc2f49", "row_index": 609, "timestamp": "2019-07-22T17:10:25Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c212f2d-f46a-4b33-9310-50b8f4dc2f49", "eventTime": "2019-07-22T17:10:25Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:ListStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}