Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3038ebd2-c98a-4c65-9b6e-e22506292313", "record_id": "flaws_cloudtrail:0000000:3038ebd2-c98a-4c65-9b6e-e22506292313", "row_index": 0, "timestamp": "2017-02-12T19:57:06Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 622, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3038ebd2-c98a-4c65-9b6e-e22506292313", "eventTime": "2017-02-12T19:57:06Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22a0d9b1-deea-4d39-827b-2af7050ed3f3", "record_id": "flaws_cloudtrail:0000001:22a0d9b1-deea-4d39-827b-2af7050ed3f3", "row_index": 1, "timestamp": "2017-02-12T19:59:10Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22a0d9b1-deea-4d39-827b-2af7050ed3f3", "eventTime": "2017-02-12T19:59:10Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9facf7ca-cb76-4b19-940c-3de6803f7efb", "record_id": "flaws_cloudtrail:0000002:9facf7ca-cb76-4b19-940c-3de6803f7efb", "row_index": 2, "timestamp": "2017-02-12T19:59:10Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9facf7ca-cb76-4b19-940c-3de6803f7efb", "eventTime": "2017-02-12T19:59:10Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6596d3b4-7c98-40b1-867d-f317f1dbdc18", "record_id": "flaws_cloudtrail:0000003:6596d3b4-7c98-40b1-867d-f317f1dbdc18", "row_index": 3, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6596d3b4-7c98-40b1-867d-f317f1dbdc18", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f9d038c-e5a5-443e-83d5-4cf00941d399", "record_id": "flaws_cloudtrail:0000004:9f9d038c-e5a5-443e-83d5-4cf00941d399", "row_index": 4, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f9d038c-e5a5-443e-83d5-4cf00941d399", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4babc3a3-77b1-44b6-9940-42363d44f5b2", "record_id": "flaws_cloudtrail:0000005:4babc3a3-77b1-44b6-9940-42363d44f5b2", "row_index": 5, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4babc3a3-77b1-44b6-9940-42363d44f5b2", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f959326-973c-4508-bc82-5ec06bea252f", "record_id": "flaws_cloudtrail:0000006:c2f959326-973c-4508-bc82-5ec06bea252f", "row_index": 6, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f959326-973c-4508-bc82-5ec06bea252f", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec27e8a-b750-4c7c-95e3-99a80d203bee", "record_id": "flaws_cloudtrail:0000007:eec27e8a-b750-4c7c-95e3-99a80d203bee", "row_index": 7, "timestamp": "2017-02-12T19:59:10Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec27e8a-b750-4c7c-95e3-99a80d203bee", "eventTime": "2017-02-12T19:59:10Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30f077e5-6c11-41f6-8ed0-2aedad506b1d", "record_id": "flaws_cloudtrail:0000008:30f077e5-6c11-41f6-8ed0-2aedad506b1d", "row_index": 8, "timestamp": "2017-02-12T19:59:10Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30f077e5-6c11-41f6-8ed0-2aedad506b1d", "eventTime": "2017-02-12T19:59:10Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc97bcac-91e6-490f-9f7c-32e56cc58dcd", "record_id": "flaws_cloudtrail:0000009:dc97bcac-91e6-490f-9f7c-32e56cc58dcd", "row_index": 9, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc97bcac-91e6-490f-9f7c-32e56cc58dcd", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5cacd34-cfa7-4b74-a380-51dbb56832a", "record_id": "flaws_cloudtrail:0000010:e5cacd34-cfa7-4b74-a380-51dbb56832a", "row_index": 10, "timestamp": "2017-02-12T19:59:10Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5cacd34-cfa7-4b74-a380-51dbb56832a", "eventTime": "2017-02-12T19:59:10Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09bca6e3-ff6c-49f5-8735-d4389b10c769", "record_id": "flaws_cloudtrail:0000011:09bca6e3-ff6c-49f5-8735-d4389b10c769", "row_index": 11, "timestamp": "2017-02-12T20:02:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09bca6e3-ff6c-49f5-8735-d4389b10c769", "eventTime": "2017-02-12T20:02:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dd9d57f-2734-49e4-a801-ab9a7fb21dd3", "record_id": "flaws_cloudtrail:0000012:2dd9d57f-2734-49e4-a801-ab9a7fb21dd3", "row_index": 12, "timestamp": "2017-02-12T20:02:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWSCloudTrail, aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 635, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dd9d57f-2734-49e4-a801-ab9a7fb21dd3", "eventTime": "2017-02-12T20:02:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWSCloudTrail, aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032db777-fcc7-4fdd-a916-c60e1050db97", "record_id": "flaws_cloudtrail:0000013:032db777-fcc7-4fdd-a916-c60e1050db97", "row_index": 13, "timestamp": "2017-02-12T20:02:37Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "AWSCloudTrail, aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032db777-fcc7-4fdd-a916-c60e1050db97", "eventTime": "2017-02-12T20:02:37Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "AWSCloudTrail, aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e41180-aa5c-4599-89f1-1eaf8c77389c", "record_id": "flaws_cloudtrail:0000014:5e41180-aa5c-4599-89f1-1eaf8c77389c", "row_index": 14, "timestamp": "2017-02-12T20:02:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e41180-aa5c-4599-89f1-1eaf8c77389c", "eventTime": "2017-02-12T20:02:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff9cea3c-940e-4eb7-863e-df7d4ff618a8", "record_id": "flaws_cloudtrail:0000015:ff9cea3c-940e-4eb7-863e-df7d4ff618a8", "row_index": 15, "timestamp": "2017-02-12T20:03:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWSCloudTrail, aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff9cea3c-940e-4eb7-863e-df7d4ff618a8", "eventTime": "2017-02-12T20:03:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWSCloudTrail, aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7770c491-624b-4973-91fa-269607853290", "record_id": "flaws_cloudtrail:0000016:7770c491-624b-4973-91fa-269607853290", "row_index": 16, "timestamp": "2017-02-12T20:03:24Z", "event_type": "PutBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[AWSCloudTrail, aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7770c491-624b-4973-91fa-269607853290", "eventTime": "2017-02-12T20:03:24Z", "eventName": "PutBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[AWSCloudTrail, aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "bucketPolicy": {"Version": "2012-10-17", "Statement": [{"Sid": "AWSCloudTrailAclCheck61327", "Effect": "Allow", "Principal": {"Service": "cloudtrail.amazonaws.com"}, "Action": "s3:GetBucketAcl", "Resource": "arn:aws:s3:::flaws-logs"}, {"Sid": "AWSCloudTrailWrite61327", "Effect": "Allow", "Principal": {"Service": "cloudtrail.amazonaws.com"}, "Action": "s3:PutObject", "Resource": "arn:aws:s3:::flaws-logs/cloudtrail/AWSLogs/811596193553/*", "Condition": {"StringEquals": {"__truncated_type": "dict"}}}]}, "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d9f9c9-a19b-417c-a925-a378150b8640", "record_id": "flaws_cloudtrail:0000017:d7d9f9c9-a19b-417c-a925-a378150b8640", "row_index": 17, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d9f9c9-a19b-417c-a925-a378150b8640", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "407b5157-e6e2-46de-854a-dca35b5a2697", "record_id": "flaws_cloudtrail:0000018:407b5157-e6e2-46de-854a-dca35b5a2697", "row_index": 18, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "407b5157-e6e2-46de-854a-dca35b5a2697", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6633d9e-73cb-433b-8016-7b65bc970805d", "record_id": "flaws_cloudtrail:0000019:d6633d9e-73cb-433b-8016-7b65bc970805d", "row_index": 19, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6633d9e-73cb-433b-8016-7b65bc970805d", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "976a7a83-ada1-48f7-bf14-c60eaf4f1ccb", "record_id": "flaws_cloudtrail:0000020:976a7a83-ada1-48f7-bf14-c60eaf4f1ccb", "row_index": 20, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "976a7a83-ada1-48f7-bf14-c60eaf4f1ccb", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3f14f50-0b0c-407b-9cbd-62f4300b2c5e", "record_id": "flaws_cloudtrail:0000021:a3f14f50-0b0c-407b-9cbd-62f4300b2c5e", "row_index": 21, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3f14f50-0b0c-407b-9cbd-62f4300b2c5e", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6fa7d52-cea1-44c7-8bef-7d065aa19aff", "record_id": "flaws_cloudtrail:0000022:e6fa7d52-cea1-44c7-8bef-7d065aa19aff", "row_index": 22, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6fa7d52-cea1-44c7-8bef-7d065aa19aff", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85475f09-add7-48e5-80a5-3199f6a45937", "record_id": "flaws_cloudtrail:0000023:85475f09-add7-48e5-80a5-3199f6a45937", "row_index": 23, "timestamp": "2017-02-12T20:03:25Z", "event_type": "CreateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85475f09-add7-48e5-80a5-3199f6a45937", "eventTime": "2017-02-12T20:03:25Z", "eventName": "CreateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"enableLogFileValidation": true, "name": "cloudtrail", "kmsKeyId": "", "s3KeyPrefix": "cloudtrail", "isMultiRegionTrail": true, "s3BucketName": "flaws-logs"}, "responseElements": {"s3BucketName": "flaws-logs", "includeGlobalServiceEvents": true, "logFileValidationEnabled": true, "name": "cloudtrail", "trailARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail", "s3KeyPrefix": "cloudtrail", "isMultiRegionTrail": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d184113-6f9c-4340-9c9d-b456636ba3d5", "record_id": "flaws_cloudtrail:0000024:d184113-6f9c-4340-9c9d-b456636ba3d5", "row_index": 24, "timestamp": "2017-02-12T20:03:25Z", "event_type": "StartLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d184113-6f9c-4340-9c9d-b456636ba3d5", "eventTime": "2017-02-12T20:03:25Z", "eventName": "StartLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"name": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08b62c21-0bf2-4b65-9a52-1033f7f937313", "record_id": "flaws_cloudtrail:0000025:08b62c21-0bf2-4b65-9a52-1033f7f937313", "row_index": 25, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08b62c21-0bf2-4b65-9a52-1033f7f937313", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fceb21a-9120-4ab5-9d39-d62a6f235820", "record_id": "flaws_cloudtrail:0000026:2fceb21a-9120-4ab5-9d39-d62a6f235820", "row_index": 26, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fceb21a-9120-4ab5-9d39-d62a6f235820", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b859216ba-2710-4127-b04c-4ed0eac3ef99", "record_id": "flaws_cloudtrail:0000027:b859216ba-2710-4127-b04c-4ed0eac3ef99", "row_index": 27, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b859216ba-2710-4127-b04c-4ed0eac3ef99", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708788a3-55a6-41d6-90d2-0170a282f29a", "record_id": "flaws_cloudtrail:0000028:708788a3-55a6-41d6-90d2-0170a282f29a", "row_index": 28, "timestamp": "2017-02-12T20:03:25Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708788a3-55a6-41d6-90d2-0170a282f29a", "eventTime": "2017-02-12T20:03:25Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f0abda-ea87-4005-94d1-6c302a52897", "record_id": "flaws_cloudtrail:0000029:17f0abda-ea87-4005-94d1-6c302a52897", "row_index": 29, "timestamp": "2017-02-12T20:03:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f0abda-ea87-4005-94d1-6c302a52897", "eventTime": "2017-02-12T20:03:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e98ed1de-066a-4bdb-a67f-0d34a0c7ace8", "record_id": "flaws_cloudtrail:0000030:e98ed1de-066a-4bdb-a67f-0d34a0c7ace8", "row_index": 30, "timestamp": "2017-02-12T20:03:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e98ed1de-066a-4bdb-a67f-0d34a0c7ace8", "eventTime": "2017-02-12T20:03:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66379a9-4fa4-4b69-a028-d711117f8808e", "record_id": "flaws_cloudtrail:0000031:f66379a9-4fa4-4b69-a028-d711117f8808e", "row_index": 31, "timestamp": "2017-02-12T20:03:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66379a9-4fa4-4b69-a028-d711117f8808e", "eventTime": "2017-02-12T20:03:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9176e03-33c4-4048-94b0-8a88e8eded3c", "record_id": "flaws_cloudtrail:0000032:a9176e03-33c4-4048-94b0-8a88e8eded3c", "row_index": 32, "timestamp": "2017-02-12T20:03:26Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9176e03-33c4-4048-94b0-8a88e8eded3c", "eventTime": "2017-02-12T20:03:26Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"trailNameList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58b59f01-36e8-43cc-be97-35e8b3a72ea5", "record_id": "flaws_cloudtrail:0000033:58b59f01-36e8-43cc-be97-35e8b3a72ea5", "row_index": 33, "timestamp": "2017-02-12T20:03:26Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAZ1A0NSOL1W4ECLBM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58b59f01-36e8-43cc-be97-35e8b3a72ea5", "eventTime": "2017-02-12T20:03:26Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAZ1A0NSOL1W4ECLBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37e9bbe2-82a2-413c-95a2-e339b5ead4a8", "record_id": "flaws_cloudtrail:0000034:37e9bbe2-82a2-413c-95a2-e339b5ead4a8", "row_index": 34, "timestamp": "2017-02-12T20:04:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 621, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37e9bbe2-82a2-413c-95a2-e339b5ead4a8", "eventTime": "2017-02-12T20:04:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cceba88-3e7f-4b35-800d-1d59bca73e2e", "record_id": "flaws_cloudtrail:0000035:0cceba88-3e7f-4b35-800d-1d59bca73e2e", "row_index": 35, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cceba88-3e7f-4b35-800d-1d59bca73e2e", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a405c8c-150f-435a-97fa-b36ec1a2da06", "record_id": "flaws_cloudtrail:0000036:4a405c8c-150f-435a-97fa-b36ec1a2da06", "row_index": 36, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a405c8c-150f-435a-97fa-b36ec1a2da06", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5f2ede-af65-42a3-bfde-0cbd74b0ba9b", "record_id": "flaws_cloudtrail:0000037:5d5f2ede-af65-42a3-bfde-0cbd74b0ba9b", "row_index": 37, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5f2ede-af65-42a3-bfde-0cbd74b0ba9b", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4ff874b-dfb7-4d1b-9e27-ca6948e5606b", "record_id": "flaws_cloudtrail:0000038:d4ff874b-dfb7-4d1b-9e27-ca6948e5606b", "row_index": 38, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4ff874b-dfb7-4d1b-9e27-ca6948e5606b", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332d8a85-8e0e-4aa5-a6be-f49be9ada643", "record_id": "flaws_cloudtrail:0000039:332d8a85-8e0e-4aa5-a6be-f49be9ada643", "row_index": 39, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332d8a85-8e0e-4aa5-a6be-f49be9ada643", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0df16e8-b423-4cbe-b46f-0c95f65daebe", "record_id": "flaws_cloudtrail:0000040:f0df16e8-b423-4cbe-b46f-0c95f65daebe", "row_index": 40, "timestamp": "2017-02-12T20:07:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0df16e8-b423-4cbe-b46f-0c95f65daebe", "eventTime": "2017-02-12T20:07:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d276de-e12a-446b-a5cc-d8a2f849f44e", "record_id": "flaws_cloudtrail:0000041:37d276de-e12a-446b-a5cc-d8a2f849f44e", "row_index": 41, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d276de-e12a-446b-a5cc-d8a2f849f44e", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c4e8124-818d-4c7f-b6bf-ae65515a7cd9", "record_id": "flaws_cloudtrail:0000042:4c4e8124-818d-4c7f-b6bf-ae65515a7cd9", "row_index": 42, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c4e8124-818d-4c7f-b6bf-ae65515a7cd9", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "571b8acc-01fe-4472-8538-e50a51f41dff", "record_id": "flaws_cloudtrail:0000043:571b8acc-01fe-4472-8538-e50a51f41dff", "row_index": 43, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "571b8acc-01fe-4472-8538-e50a51f41dff", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c3b8eb4-cbf3-401a-bd4d-d74a08a0480d", "record_id": "flaws_cloudtrail:0000044:6c3b8eb4-cbf3-401a-bd4d-d74a08a0480d", "row_index": 44, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c3b8eb4-cbf3-401a-bd4d-d74a08a0480d", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb9a1f88-bc6e-44c7-b17d-9619b5ab3c11", "record_id": "flaws_cloudtrail:0000045:cb9a1f88-bc6e-44c7-b17d-9619b5ab3c11", "row_index": 45, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb9a1f88-bc6e-44c7-b17d-9619b5ab3c11", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a562e806-55a6-49dd-a15d-ff6ec41a1159", "record_id": "flaws_cloudtrail:0000046:a562e806-55a6-49dd-a15d-ff6ec41a1159", "row_index": 46, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a562e806-55a6-49dd-a15d-ff6ec41a1159", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd4fcecc-4fd9-4b2d-be53-e19b5386dc43", "record_id": "flaws_cloudtrail:0000047:fd4fcecc-4fd9-4b2d-be53-e19b5386dc43", "row_index": 47, "timestamp": "2017-02-12T20:07:39Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAA6UDIVVUIFGU9EUO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd4fcecc-4fd9-4b2d-be53-e19b5386dc43", "eventTime": "2017-02-12T20:07:39Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAA6UDIVVUIFGU9EUO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f14cb58-f5a0-44e9-b3ec-e4dff97d81db", "record_id": "flaws_cloudtrail:0000048:4f14cb58-f5a0-44e9-b3ec-e4dff97d81db", "row_index": 48, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f14cb58-f5a0-44e9-b3ec-e4dff97d81db", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41ce463-4aad-4476-bec3-5c76609efc", "record_id": "flaws_cloudtrail:0000049:c41ce463-4aad-4476-bec3-5c76609efc", "row_index": 49, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41ce463-4aad-4476-bec3-5c76609efc", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "595dbd59-344a-4c4f-bda6-6820cc0ffd4b", "record_id": "flaws_cloudtrail:0000050:595dbd59-344a-4c4f-bda6-6820cc0ffd4b", "row_index": 50, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "595dbd59-344a-4c4f-bda6-6820cc0ffd4b", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c524273-3236-438d-92a0-3a0503c1f524", "record_id": "flaws_cloudtrail:0000051:c524273-3236-438d-92a0-3a0503c1f524", "row_index": 51, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c524273-3236-438d-92a0-3a0503c1f524", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b97792-f363-4ac7-bdb9-eb3045d96e5c", "record_id": "flaws_cloudtrail:0000052:3b97792-f363-4ac7-bdb9-eb3045d96e5c", "row_index": 52, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b97792-f363-4ac7-bdb9-eb3045d96e5c", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "default-vpc"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49eecac4-30ee-4337-96fc-d7c284e557cd", "record_id": "flaws_cloudtrail:0000053:49eecac4-30ee-4337-96fc-d7c284e557cd", "row_index": 53, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49eecac4-30ee-4337-96fc-d7c284e557cd", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d382e6-400d-4799-88f8-1642fd882d06", "record_id": "flaws_cloudtrail:0000054:79d382e6-400d-4799-88f8-1642fd882d06", "row_index": 54, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d382e6-400d-4799-88f8-1642fd882d06", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"DescribeHostsRequest": {"Filter": {"Value": {"tag": "1", "content": "available"}, "tag": "1", "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee520038-f22c-4daa-8582-4c105ce8d676", "record_id": "flaws_cloudtrail:0000055:0ee520038-f22c-4daa-8582-4c105ce8d676", "row_index": 55, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee520038-f22c-4daa-8582-4c105ce8d676", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "204b73e6-3836-4f20-9761-d4aec4107c38", "record_id": "flaws_cloudtrail:0000056:204b73e6-3836-4f20-9761-d4aec4107c38", "row_index": 56, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "204b73e6-3836-4f20-9761-d4aec4107c38", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5adfa7c5-982b-4026-aafb-1d3d3db2edb4", "record_id": "flaws_cloudtrail:0000057:5adfa7c5-982b-4026-aafb-1d3d3db2edb4", "row_index": 57, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5adfa7c5-982b-4026-aafb-1d3d3db2edb4", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b33fd83c-3e4c-4503-a967-af9d3967c0ee", "record_id": "flaws_cloudtrail:0000058:b33fd83c-3e4c-4503-a967-af9d3967c0ee", "row_index": 58, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b33fd83c-3e4c-4503-a967-af9d3967c0ee", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d5edf2-eb2f-4dc9-a21c-1878c64580f1", "record_id": "flaws_cloudtrail:0000059:79d5edf2-eb2f-4dc9-a21c-1878c64580f1", "row_index": 59, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d5edf2-eb2f-4dc9-a21c-1878c64580f1", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b627088ef-216a-4e89-9460-bd8d2aad75dc", "record_id": "flaws_cloudtrail:0000060:b627088ef-216a-4e89-9460-bd8d2aad75dc", "row_index": 60, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b627088ef-216a-4e89-9460-bd8d2aad75dc", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f741b6b-af9a-4b7e-8628-97d698622", "record_id": "flaws_cloudtrail:0000061:2f741b6b-af9a-4b7e-8628-97d698622", "row_index": 61, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f741b6b-af9a-4b7e-8628-97d698622", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "supported-platforms"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728a819f-f84d-4e20-916b-f66f81990b16", "record_id": "flaws_cloudtrail:0000062:728a819f-f84d-4e20-916b-f66f81990b16", "row_index": 62, "timestamp": "2017-02-12T20:07:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728a819f-f84d-4e20-916b-f66f81990b16", "eventTime": "2017-02-12T20:07:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d74b234a-bdd1-457a-8758-afc57affd6ee", "record_id": "flaws_cloudtrail:0000063:d74b234a-bdd1-457a-8758-afc57affd6ee", "row_index": 63, "timestamp": "2017-02-12T20:07:58Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d74b234a-bdd1-457a-8758-afc57affd6ee", "eventTime": "2017-02-12T20:07:58Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bab3dbc0-8df6-4a70-abbd-c7849d6a7295", "record_id": "flaws_cloudtrail:0000064:bab3dbc0-8df6-4a70-abbd-c7849d6a7295", "row_index": 64, "timestamp": "2017-02-12T20:07:58Z", "event_type": "DescribeVpcClassicLink", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bab3dbc0-8df6-4a70-abbd-c7849d6a7295", "eventTime": "2017-02-12T20:07:58Z", "eventName": "DescribeVpcClassicLink", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f2233af-a448-488a-b9f6-243998e2d8", "record_id": "flaws_cloudtrail:0000065:8f2233af-a448-488a-b9f6-243998e2d8", "row_index": 65, "timestamp": "2017-02-12T20:07:58Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f2233af-a448-488a-b9f6-243998e2d8", "eventTime": "2017-02-12T20:07:58Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {"items": [{"imageId": "ami-5039cdc9"}]}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c73e463-7fec-435e-8c5b-d676b6603c44", "record_id": "flaws_cloudtrail:0000066:9c73e463-7fec-435e-8c5b-d676b6603c44", "row_index": 66, "timestamp": "2017-02-12T20:07:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c73e463-7fec-435e-8c5b-d676b6603c44", "eventTime": "2017-02-12T20:07:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a459c448-183f-4f35-a566-d00168fd10", "record_id": "flaws_cloudtrail:0000067:a459c448-183f-4f35-a566-d00168fd10", "row_index": 67, "timestamp": "2017-02-12T20:08:08Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a459c448-183f-4f35-a566-d00168fd10", "eventTime": "2017-02-12T20:08:08Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60cdf866-1318-4dd6-b55d-09950a32a62b", "record_id": "flaws_cloudtrail:0000068:60cdf866-1318-4dd6-b55d-09950a32a62b", "row_index": 68, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60cdf866-1318-4dd6-b55d-09950a32a62b", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "326e33e9-8475-4cbf-9b52-2f5ff7638e80", "record_id": "flaws_cloudtrail:0000069:326e33e9-8475-4cbf-9b52-2f5ff7638e80", "row_index": 69, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "326e33e9-8475-4cbf-9b52-2f5ff7638e80", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "image-type", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "004970-faac-4065-b040-35de20850c43", "record_id": "flaws_cloudtrail:0000070:004970-faac-4065-b040-35de20850c43", "row_index": 70, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeDirectories", "event_source": "ds.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Jakarta", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "004970-faac-4065-b040-35de20850c43", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeDirectories", "eventSource": "ds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Jakarta", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"includeIdentityPools": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce8799d-79ae-46c4-bb6f-18161ee2e9da", "record_id": "flaws_cloudtrail:0000071:8ce8799d-79ae-46c4-bb6f-18161ee2e9da", "row_index": 71, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce8799d-79ae-46c4-bb6f-18161ee2e9da", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"startTime": 1518487040128, "instanceTypeSet": {}, "productDescriptionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70979d-b8a3-463a-8860-e8f85272e608", "record_id": "flaws_cloudtrail:0000072:70979d-b8a3-463a-8860-e8f85272e608", "row_index": 72, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70979d-b8a3-463a-8860-e8f85272e608", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcb833703-c410-4d82-b759-758e2fe916a1", "record_id": "flaws_cloudtrail:0000073:bcb833703-c410-4d82-b759-758e2fe916a1", "row_index": 73, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcb833703-c410-4d82-b759-758e2fe916a1", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82486ff-130f-43a6-b7c4-f8efa71af896", "record_id": "flaws_cloudtrail:0000074:82486ff-130f-43a6-b7c4-f8efa71af896", "row_index": 74, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82486ff-130f-43a6-b7c4-f8efa71af896", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ad47b8d-09be-4b40-8b0a-48e85f0bf123", "record_id": "flaws_cloudtrail:0000075:7ad47b8d-09be-4b40-8b0a-48e85f0bf123", "row_index": 75, "timestamp": "2017-02-12T20:08:08Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ad47b8d-09be-4b40-8b0a-48e85f0bf123", "eventTime": "2017-02-12T20:08:08Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "image-type", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6557ca3-cc04-4e5f-b298-8d367b10e116", "record_id": "flaws_cloudtrail:0000076:c6557ca3-cc04-4e5f-b298-8d367b10e116", "row_index": 76, "timestamp": "2017-02-12T20:08:52Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6557ca3-cc04-4e5f-b298-8d367b10e116", "eventTime": "2017-02-12T20:08:52Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e533df-8f81-4d1c-a62a-c6ccb4ff3f9a", "record_id": "flaws_cloudtrail:0000077:48e533df-8f81-4d1c-a62a-c6ccb4ff3f9a", "row_index": 77, "timestamp": "2017-02-12T20:08:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e533df-8f81-4d1c-a62a-c6ccb4ff3f9a", "eventTime": "2017-02-12T20:08:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9852b93e-1426-4683-aaff-ac70425c747d", "record_id": "flaws_cloudtrail:0000078:9852b93e-1426-4683-aaff-ac70425c747d", "row_index": 78, "timestamp": "2017-02-12T20:08:57Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9852b93e-1426-4683-aaff-ac70425c747d", "eventTime": "2017-02-12T20:08:57Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72f8860b-6b6d-4bd5-90a2-89f9eab5cecb", "record_id": "flaws_cloudtrail:0000079:72f8860b-6b6d-4bd5-90a2-89f9eab5cecb", "row_index": 79, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72f8860b-6b6d-4bd5-90a2-89f9eab5cecb", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a45c40c-10ad-4a44-9ef2-49b56aec9855", "record_id": "flaws_cloudtrail:0000080:7a45c40c-10ad-4a44-9ef2-49b56aec9855", "row_index": 80, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a45c40c-10ad-4a44-9ef2-49b56aec9855", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9abaf641-ea11-4b94-aca6-f1990a6269fa", "record_id": "flaws_cloudtrail:0000081:9abaf641-ea11-4b94-aca6-f1990a6269fa", "row_index": 81, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9abaf641-ea11-4b94-aca6-f1990a6269fa", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05ef4279-13d9-44cc-8673-32e4604b4464", "record_id": "flaws_cloudtrail:0000082:05ef4279-13d9-44cc-8673-32e4604b4464", "row_index": 82, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05ef4279-13d9-44cc-8673-32e4604b4464", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f9bdb47-6ae0-4c5c-9e4d-8bd7d6337339", "record_id": "flaws_cloudtrail:0000083:2f9bdb47-6ae0-4c5c-9e4d-8bd7d6337339", "row_index": 83, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f9bdb47-6ae0-4c5c-9e4d-8bd7d6337339", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866a3fa6-86c2-46d2-84b7-00e77ec313957", "record_id": "flaws_cloudtrail:0000084:866a3fa6-86c2-46d2-84b7-00e77ec313957", "row_index": 84, "timestamp": "2017-02-12T20:09:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866a3fa6-86c2-46d2-84b7-00e77ec313957", "eventTime": "2017-02-12T20:09:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d77cfdba-d782-45fb-8da8-1fcaaea565c4", "record_id": "flaws_cloudtrail:0000085:d77cfdba-d782-45fb-8da8-1fcaaea565c4", "row_index": 85, "timestamp": "2017-02-12T20:09:02Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d77cfdba-d782-45fb-8da8-1fcaaea565c4", "eventTime": "2017-02-12T20:09:02Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b1d7fa-25cc-448f-be1e-f4f5b7520d2a", "record_id": "flaws_cloudtrail:0000086:f4b1d7fa-25cc-448f-be1e-f4f5b7520d2a", "row_index": 86, "timestamp": "2017-02-12T20:09:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b1d7fa-25cc-448f-be1e-f4f5b7520d2a", "eventTime": "2017-02-12T20:09:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d06c99-f149-4a65-a434-14208f5f2ee2", "record_id": "flaws_cloudtrail:0000087:34d06c99-f149-4a65-a434-14208f5f2ee2", "row_index": 87, "timestamp": "2017-02-12T20:09:08Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d06c99-f149-4a65-a434-14208f5f2ee2", "eventTime": "2017-02-12T20:09:08Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7fbb19f-f904-4859-a2c7-e6790b9e3d7f", "record_id": "flaws_cloudtrail:0000088:e7fbb19f-f904-4859-a2c7-e6790b9e3d7f", "row_index": 88, "timestamp": "2017-02-12T20:09:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7fbb19f-f904-4859-a2c7-e6790b9e3d7f", "eventTime": "2017-02-12T20:09:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c243453-73ca-439a-b546-3c7268bb1c08", "record_id": "flaws_cloudtrail:0000089:c243453-73ca-439a-b546-3c7268bb1c08", "row_index": 89, "timestamp": "2017-02-12T20:09:08Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c243453-73ca-439a-b546-3c7268bb1c08", "eventTime": "2017-02-12T20:09:08Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eb1258b-4197-49c9-8b2e-75c9a20e9898", "record_id": "flaws_cloudtrail:0000090:9eb1258b-4197-49c9-8b2e-75c9a20e9898", "row_index": 90, "timestamp": "2017-02-12T20:09:23Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eb1258b-4197-49c9-8b2e-75c9a20e9898", "eventTime": "2017-02-12T20:09:23Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b735ad1e-ade9-4d44-800b-d367ead6de9a", "record_id": "flaws_cloudtrail:0000091:b735ad1e-ade9-4d44-800b-d367ead6de9a", "row_index": 91, "timestamp": "2017-02-12T20:09:23Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b735ad1e-ade9-4d44-800b-d367ead6de9a", "eventTime": "2017-02-12T20:09:23Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcc25b8b-9eba-4a90-a840-bcbb1b0f54de", "record_id": "flaws_cloudtrail:0000092:fcc25b8b-9eba-4a90-a840-bcbb1b0f54de", "row_index": 92, "timestamp": "2017-02-12T20:09:23Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcc25b8b-9eba-4a90-a840-bcbb1b0f54de", "eventTime": "2017-02-12T20:09:23Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa02cc2-ca19-465e-8a92-86d3dae67e7d", "record_id": "flaws_cloudtrail:0000093:5aa02cc2-ca19-465e-8a92-86d3dae67e7d", "row_index": 93, "timestamp": "2017-02-12T20:09:23Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa02cc2-ca19-465e-8a92-86d3dae67e7d", "eventTime": "2017-02-12T20:09:23Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc19a469-808a-4000-8916-0d5ebe57c3e0", "record_id": "flaws_cloudtrail:0000094:cc19a469-808a-4000-8916-0d5ebe57c3e0", "row_index": 94, "timestamp": "2017-02-12T20:09:23Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc19a469-808a-4000-8916-0d5ebe57c3e0", "eventTime": "2017-02-12T20:09:23Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84b2fe8b-950f-4139-b069-7ae8272c8b2f", "record_id": "flaws_cloudtrail:0000095:84b2fe8b-950f-4139-b069-7ae8272c8b2f", "row_index": 95, "timestamp": "2017-02-12T20:09:24Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84b2fe8b-950f-4139-b069-7ae8272c8b2f", "eventTime": "2017-02-12T20:09:24Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b6f332-002a-497f-890d-3b1ba157bdb4", "record_id": "flaws_cloudtrail:0000096:74b6f332-002a-497f-890d-3b1ba157bdb4", "row_index": 96, "timestamp": "2017-02-12T20:09:44Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b6f332-002a-497f-890d-3b1ba157bdb4", "eventTime": "2017-02-12T20:09:44Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c870eb47-b8e7-4f86-b2f5-ef988bcc2687", "record_id": "flaws_cloudtrail:0000097:c870eb47-b8e7-4f86-b2f5-ef988bcc2687", "row_index": 97, "timestamp": "2017-02-12T20:09:59Z", "event_type": "CreateRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c870eb47-b8e7-4f86-b2f5-ef988bcc2687", "eventTime": "2017-02-12T20:09:59Z", "eventName": "CreateRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"roleName": "flaws", "assumeRolePolicyDocument": "{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"sts:AssumeRole\"\n      ],\n      \"Principal\": {\n        \"Service\": [\n          \"ec2.amazonaws.com\"\n        ]\n      }\n    }\n  ]\n}"}, "responseElements": {"role": {"assumeRolePolicyDocument": "%7B%0A%20%20%22Version%22%3A%20%74163-10-17%22%2C%0A%20%20%22Statement%22%3A%20%5B%0A%20%20%20%20%7B%0A%20%20%20%20%20%20%22Effect%22%3A%20%22Allow%22%2C%0A%20%20%20%20%20%20%22Action%22%3A%20%5B%0A%20%20%20%20%20%20%20%20%22sts%3AAssumeRole%22%0A%20%20%20%20%20%20%5D%2C%0A%20%20%20%20%20%20%22Principal%22%3A%20%7B%0A%20%20%20%20%20%20%20%20%22Service%22%3A%20%5B%0A%20%20%20%20%20%20%20%20%20%20%22ec2.amazonaws.com%22%0A%20%20%20%20%20%20%20%20%5D%0A%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%20%20%5D%0A%7D", "arn": "arn:aws:iam::811596193553:role/flaws", "roleId": "AROACW5CSA8C8WHOB3O7Q", "createDate": "Feb 12, 2017 8:09:59 PM", "roleName": "flaws", "path": "/"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2747fd3-61a0-4fe6-a672-b80a299f50f5", "record_id": "flaws_cloudtrail:0000098:b2747fd3-61a0-4fe6-a672-b80a299f50f5", "row_index": 98, "timestamp": "2017-02-12T20:10:00Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2747fd3-61a0-4fe6-a672-b80a299f50f5", "eventTime": "2017-02-12T20:10:00Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b191152-9940-4994-97e3-38007c7eb", "record_id": "flaws_cloudtrail:0000099:f4b191152-9940-4994-97e3-38007c7eb", "row_index": 99, "timestamp": "2017-02-12T20:10:00Z", "event_type": "AddRoleToInstanceProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b191152-9940-4994-97e3-38007c7eb", "eventTime": "2017-02-12T20:10:00Z", "eventName": "AddRoleToInstanceProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instanceProfileName": "flaws", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "685994-68fe-4a96-a9e8-b8a86b7340c0", "record_id": "flaws_cloudtrail:0000100:685994-68fe-4a96-a9e8-b8a86b7340c0", "row_index": 100, "timestamp": "2017-02-12T20:10:00Z", "event_type": "CreateInstanceProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "685994-68fe-4a96-a9e8-b8a86b7340c0", "eventTime": "2017-02-12T20:10:00Z", "eventName": "CreateInstanceProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instanceProfileName": "flaws"}, "responseElements": {"instanceProfile": {"instanceProfileId": "AIPA1O2BUK2C4REEYPXJQ", "arn": "arn:aws:iam::811596193553:instance-profile/flaws", "roles": [], "path": "/", "instanceProfileName": "flaws", "createDate": "Feb 12, 2017 8:10:00 PM"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f657c8ef-fa62-4f5b-9a0f-13c019e16e1c", "record_id": "flaws_cloudtrail:0000101:f657c8ef-fa62-4f5b-9a0f-13c019e16e1c", "row_index": 101, "timestamp": "2017-02-12T20:10:00Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f657c8ef-fa62-4f5b-9a0f-13c019e16e1c", "eventTime": "2017-02-12T20:10:00Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33487d6-bb3b-4294-9a5c-a06811542139", "record_id": "flaws_cloudtrail:0000102:33487d6-bb3b-4294-9a5c-a06811542139", "row_index": 102, "timestamp": "2017-02-12T20:10:00Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33487d6-bb3b-4294-9a5c-a06811542139", "eventTime": "2017-02-12T20:10:00Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a23d9433-69e9-49ba-947c-e1c5e9c6ac9a", "record_id": "flaws_cloudtrail:0000103:a23d9433-69e9-49ba-947c-e1c5e9c6ac9a", "row_index": 103, "timestamp": "2017-02-12T20:18:18Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a23d9433-69e9-49ba-947c-e1c5e9c6ac9a", "eventTime": "2017-02-12T20:18:18Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1db3f7aa-ea0b-4a8e-a158-fce1fcbf943d", "record_id": "flaws_cloudtrail:0000104:1db3f7aa-ea0b-4a8e-a158-fce1fcbf943d", "row_index": 104, "timestamp": "2017-02-12T20:18:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1db3f7aa-ea0b-4a8e-a158-fce1fcbf943d", "eventTime": "2017-02-12T20:18:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-700d20fae5a7eab58"}]}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c595d6cd-8e27-48f0-a973-e215b83dfaec", "record_id": "flaws_cloudtrail:0000105:c595d6cd-8e27-48f0-a973-e215b83dfaec", "row_index": 105, "timestamp": "2017-02-12T20:18:48Z", "event_type": "ListAliases", "event_source": "kms.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Jakarta", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c595d6cd-8e27-48f0-a973-e215b83dfaec", "eventTime": "2017-02-12T20:18:48Z", "eventName": "ListAliases", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Jakarta", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"limit": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc62ea40-b717-4dde-aec6-6e559296e", "record_id": "flaws_cloudtrail:0000106:cc62ea40-b717-4dde-aec6-6e559296e", "row_index": 106, "timestamp": "2017-02-12T20:18:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc62ea40-b717-4dde-aec6-6e559296e", "eventTime": "2017-02-12T20:18:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cbd8137-0a51-49d1-b1e7-00fb5c9e275c", "record_id": "flaws_cloudtrail:0000107:0cbd8137-0a51-49d1-b1e7-00fb5c9e275c", "row_index": 107, "timestamp": "2017-02-12T20:19:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cbd8137-0a51-49d1-b1e7-00fb5c9e275c", "eventTime": "2017-02-12T20:19:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-700d20fae5a7eab58"}]}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b95dbb5-ca5e-4b7b-aef3-666976f70f3e", "record_id": "flaws_cloudtrail:0000108:7b95dbb5-ca5e-4b7b-aef3-666976f70f3e", "row_index": 108, "timestamp": "2017-02-12T20:19:53Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b95dbb5-ca5e-4b7b-aef3-666976f70f3e", "eventTime": "2017-02-12T20:19:53Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea9ba18b-6f28-42bd-9c6a-fc9e66b9adae", "record_id": "flaws_cloudtrail:0000109:ea9ba18b-6f28-42bd-9c6a-fc9e66b9adae", "row_index": 109, "timestamp": "2017-02-12T20:20:03Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea9ba18b-6f28-42bd-9c6a-fc9e66b9adae", "eventTime": "2017-02-12T20:20:03Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keyName": "Default"}, "responseElements": {"keyName": "Default", "keyFingerprint": "07:ac:63:2a:07:b7:e1:35:be:26:49:07:16:90:fe:e7:57:e0:2c:31", "keyMaterial": "<sensitiveDataRemoved>"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db4b62f9-304a-4d3b-8d41-6f9518c6aeac", "record_id": "flaws_cloudtrail:0000110:db4b62f9-304a-4d3b-8d41-6f9518c6aeac", "row_index": 110, "timestamp": "2017-02-12T20:20:03Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db4b62f9-304a-4d3b-8d41-6f9518c6aeac", "eventTime": "2017-02-12T20:20:03Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8d40e4b-3564-4fdf-a073-e66b97863c", "record_id": "flaws_cloudtrail:0000111:b8d40e4b-3564-4fdf-a073-e66b97863c", "row_index": 111, "timestamp": "2017-02-12T20:37:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 620, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8d40e4b-3564-4fdf-a073-e66b97863c", "eventTime": "2017-02-12T20:37:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad6bdbd3-ee3d-4962-81a1-1c820b4e68c5", "record_id": "flaws_cloudtrail:0000112:ad6bdbd3-ee3d-4962-81a1-1c820b4e68c5", "row_index": 112, "timestamp": "2017-02-12T20:37:27Z", "event_type": "CreateSecurityGroup", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad6bdbd3-ee3d-4962-81a1-1c820b4e68c5", "eventTime": "2017-02-12T20:37:27Z", "eventName": "CreateSecurityGroup", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "Client.InvalidParameterValue", "errorMessage": "Cannot use reserved security group name: Default", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"groupName": "Default", "groupDescription": "Level", "vpcId": "vpc-6a44c722"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67762-a545-4720-a7d6-969d5663eaf0", "record_id": "flaws_cloudtrail:0000113:a67762-a545-4720-a7d6-969d5663eaf0", "row_index": 113, "timestamp": "2017-02-12T20:37:35Z", "event_type": "CreateSecurityGroup", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67762-a545-4720-a7d6-969d5663eaf0", "eventTime": "2017-02-12T20:37:35Z", "eventName": "CreateSecurityGroup", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "errorCode": "Client.InvalidParameterValue", "errorMessage": "Cannot use reserved security group name: Default", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"groupName": "Default", "groupDescription": "Level", "vpcId": "vpc-6a44c722"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4daeabcd-7b17-48e4-abe2-c1affcb85172", "record_id": "flaws_cloudtrail:0000114:4daeabcd-7b17-48e4-abe2-c1affcb85172", "row_index": 114, "timestamp": "2017-02-12T20:37:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4daeabcd-7b17-48e4-abe2-c1affcb85172", "eventTime": "2017-02-12T20:37:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-700d20fae5a7eab58"}]}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1f8f59-493b-47bd-8cda-8d31a0ba0c1d", "record_id": "flaws_cloudtrail:0000115:ea1f8f59-493b-47bd-8cda-8d31a0ba0c1d", "row_index": 115, "timestamp": "2017-02-12T20:37:38Z", "event_type": "ListAliases", "event_source": "kms.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Coral/Jakarta", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1f8f59-493b-47bd-8cda-8d31a0ba0c1d", "eventTime": "2017-02-12T20:37:38Z", "eventName": "ListAliases", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Coral/Jakarta", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"limit": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "763ca306-5fec-4bcf-ab6f-6624a24c26ea", "record_id": "flaws_cloudtrail:0000116:763ca306-5fec-4bcf-ab6f-6624a24c26ea", "row_index": 116, "timestamp": "2017-02-12T20:37:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "763ca306-5fec-4bcf-ab6f-6624a24c26ea", "eventTime": "2017-02-12T20:37:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-700d20fae5a7eab58"}]}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "461625fa-ca39-4c0a-8cc4-589df8287d25", "record_id": "flaws_cloudtrail:0000117:461625fa-ca39-4c0a-8cc4-589df8287d25", "row_index": 117, "timestamp": "2017-02-12T20:37:57Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "461625fa-ca39-4c0a-8cc4-589df8287d25", "eventTime": "2017-02-12T20:37:57Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e694c21-f0c3-4133-9eb7-43850ea4dc", "record_id": "flaws_cloudtrail:0000118:5e694c21-f0c3-4133-9eb7-43850ea4dc", "row_index": 118, "timestamp": "2017-02-12T20:38:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e694c21-f0c3-4133-9eb7-43850ea4dc", "eventTime": "2017-02-12T20:38:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-811ce3ab"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acb05814-6518-4556-885b-01bc482a671e", "record_id": "flaws_cloudtrail:0000119:acb05814-6518-4556-885b-01bc482a671e", "row_index": 119, "timestamp": "2017-02-12T20:38:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acb05814-6518-4556-885b-01bc482a671e", "eventTime": "2017-02-12T20:38:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-811ce3ab"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccfac201-4990-4a51-8644-618afba4bce5", "record_id": "flaws_cloudtrail:0000120:ccfac201-4990-4a51-8644-618afba4bce5", "row_index": 120, "timestamp": "2017-02-12T20:38:07Z", "event_type": "CreateSecurityGroup", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccfac201-4990-4a51-8644-618afba4bce5", "eventTime": "2017-02-12T20:38:07Z", "eventName": "CreateSecurityGroup", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"groupName": "Flaws", "groupDescription": "Flaws level", "vpcId": "vpc-6a44c722"}, "responseElements": {"_return": true, "groupId": "sg-811ce3ab"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22afea47-08f5-42a9-bf99-3438f9b08b0e", "record_id": "flaws_cloudtrail:0000121:22afea47-08f5-42a9-bf99-3438f9b08b0e", "row_index": 121, "timestamp": "2017-02-12T20:38:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22afea47-08f5-42a9-bf99-3438f9b08b0e", "eventTime": "2017-02-12T20:38:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {"items": [{"groupId": "sg-811ce3ab"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c32ce4f-a53c-4e95-9567-ca111872d857", "record_id": "flaws_cloudtrail:0000122:0c32ce4f-a53c-4e95-9567-ca111872d857", "row_index": 122, "timestamp": "2017-02-12T20:38:07Z", "event_type": "AuthorizeSecurityGroupIngress", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c32ce4f-a53c-4e95-9567-ca111872d857", "eventTime": "2017-02-12T20:38:07Z", "eventName": "AuthorizeSecurityGroupIngress", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"groupId": "sg-811ce3ab", "ipPermissions": {"items": [{"ipProtocol": "tcp", "fromPort": 22, "toPort": 22, "groups": {}, "ipRanges": {"items": {"__truncated_type": "list"}}, "ipv6Ranges": {}, "prefixListIds": {}}, {"ipProtocol": "tcp", "fromPort": 80, "toPort": 80, "groups": {}, "ipRanges": {"items": {"__truncated_type": "list"}}, "ipv6Ranges": {"items": {"__truncated_type": "list"}}, "prefixListIds": {}}]}}, "responseElements": {"_return": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd87607-9e30-4884-8c7c-3663a436e4a3", "record_id": "flaws_cloudtrail:0000123:dd87607-9e30-4884-8c7c-3663a436e4a3", "row_index": 123, "timestamp": "2017-02-12T20:38:08Z", "event_type": "CreateTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd87607-9e30-4884-8c7c-3663a436e4a3", "eventTime": "2017-02-12T20:38:08Z", "eventName": "CreateTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"resourcesSet": {"items": [{"resourceId": "i-cf8e8cb731da38a5c"}]}, "tagSet": {"items": [{"key": "Name"}]}}, "responseElements": {"_return": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77269beb-e173-48f3-a267-604c50548", "record_id": "flaws_cloudtrail:0000124:77269beb-e173-48f3-a267-604c50548", "row_index": 124, "timestamp": "2017-02-12T20:38:08Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77269beb-e173-48f3-a267-604c50548", "eventTime": "2017-02-12T20:38:08Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {"items": [{"name": "resource-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a910a32-8fc2-4b12-9b16-a81ed63984eb", "record_id": "flaws_cloudtrail:0000125:4a910a32-8fc2-4b12-9b16-a81ed63984eb", "row_index": 125, "timestamp": "2017-02-12T20:38:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 3042, "raw_record_depth": 11, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a910a32-8fc2-4b12-9b16-a81ed63984eb", "eventTime": "2017-02-12T20:38:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"groupSet": {"items": [{"groupId": "sg-811ce3ab"}]}, "instancesSet": {"items": [{"imageId": "ami-5039cdc9", "minCount": 1, "maxCount": 1, "keyName": "Default"}]}, "clientToken": "XdibQ5825625819818", "disableApiTermination": false, "monitoring": {"enabled": false}, "iamInstanceProfile": {"arn": "arn:aws:iam::811596193553:instance-profile/flaws"}, "tenancy": "default", "ebsOptimized": false, "instanceType": "t2.micro", "instanceInitiatedShutdownBehavior": "stop"}, "responseElements": {"requestId": "033510b11-ec22-4e8d-8df3-4ea0c7c52b45", "reservationId": "r-d71cb0ead4d88a8c0", "ownerId": "811596193553", "groupSet": {}, "instancesSet": {"items": [{"groupSet": {"items": [{"__truncated_type": "dict"}]}, "subnetId": "subnet-5cb94970", "productCodes": {}, "architecture": "x86_64", "stateReason": {"code": "pending", "message": "pending"}, "privateIpAddress": "52.198.102.5", "clientToken": "XdibQ5825625819818", "keyName": "Default", "placement": {"availabilityZone": "us-west-2a", "tenancy": "default"}, "vpcId": "vpc-6a44c722", "privateDnsName": "ip-172-31-43-208.us-west-2.compute.internal", "monitoring": {"state": "disabled"}, "iamInstanceProfile": {"arn": "arn:aws:iam::811596193553:instance-profile/flaws", "id": "AIPA1O2BUK2C4REEYPXJQ"}, "sourceDestCheck": true, "virtualizationType": "hvm", "launchTime": 1486931888000, "imageId": "ami-5039cdc9", "rootDeviceType": "ebs", "ebsOptimized": false, "amiLaunchIndex": 0, "instanceType": "t2.micro", "instanceState": {"code": 0, "name": "pending"}, "networkInterfaceSet": {"items": [{"__truncated_type": "dict"}]}, "rootDeviceName": "/dev/xvda", "hypervisor": "xen", "instanceId": "i-cf8e8cb731da38a5c"}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2485f2-5753-46f2-9b1a-e2066ba97477", "record_id": "flaws_cloudtrail:0000126:4b2485f2-5753-46f2-9b1a-e2066ba97477", "row_index": 126, "timestamp": "2017-02-12T20:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2485f2-5753-46f2-9b1a-e2066ba97477", "eventTime": "2017-02-12T20:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3be5a4-2bf0-4bfb-a258-b9c13ab1654b", "record_id": "flaws_cloudtrail:0000127:9e3be5a4-2bf0-4bfb-a258-b9c13ab1654b", "row_index": 127, "timestamp": "2017-02-12T20:38:08Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3be5a4-2bf0-4bfb-a258-b9c13ab1654b", "eventTime": "2017-02-12T20:38:08Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92ed8416-cec4-4d16-8eed-f4d57d833c33", "record_id": "flaws_cloudtrail:0000128:92ed8416-cec4-4d16-8eed-f4d57d833c33", "row_index": 128, "timestamp": "2017-02-12T20:38:08Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92ed8416-cec4-4d16-8eed-f4d57d833c33", "eventTime": "2017-02-12T20:38:08Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea5177e-21f6-443b-9ac1-9bbdeb7c61f4", "record_id": "flaws_cloudtrail:0000129:1ea5177e-21f6-443b-9ac1-9bbdeb7c61f4", "row_index": 129, "timestamp": "2017-02-12T20:38:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea5177e-21f6-443b-9ac1-9bbdeb7c61f4", "eventTime": "2017-02-12T20:38:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e545479-33d2-4440-9866-7be7d659db3b", "record_id": "flaws_cloudtrail:0000130:e545479-33d2-4440-9866-7be7d659db3b", "row_index": 130, "timestamp": "2017-02-12T20:38:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 621, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e545479-33d2-4440-9866-7be7d659db3b", "eventTime": "2017-02-12T20:38:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78fd281f-2902-480a-8d8e-f56d6eadca05", "record_id": "flaws_cloudtrail:0000131:78fd281f-2902-480a-8d8e-f56d6eadca05", "row_index": 131, "timestamp": "2017-02-12T20:38:21Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78fd281f-2902-480a-8d8e-f56d6eadca05", "eventTime": "2017-02-12T20:38:21Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad03747-4e9f-4ca4-b53d-a3bd49dd1b53", "record_id": "flaws_cloudtrail:0000132:0ad03747-4e9f-4ca4-b53d-a3bd49dd1b53", "row_index": 132, "timestamp": "2017-02-12T20:38:21Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad03747-4e9f-4ca4-b53d-a3bd49dd1b53", "eventTime": "2017-02-12T20:38:21Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "134f4818-be06-46e0-a60b-db079c3c91e4", "record_id": "flaws_cloudtrail:0000133:134f4818-be06-46e0-a60b-db079c3c91e4", "row_index": 133, "timestamp": "2017-02-12T20:38:21Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "134f4818-be06-46e0-a60b-db079c3c91e4", "eventTime": "2017-02-12T20:38:21Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535bae3d-e074-4dc1-b34b-1a454d12757b", "record_id": "flaws_cloudtrail:0000134:535bae3d-e074-4dc1-b34b-1a454d12757b", "row_index": 134, "timestamp": "2017-02-12T20:38:21Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535bae3d-e074-4dc1-b34b-1a454d12757b", "eventTime": "2017-02-12T20:38:21Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec75fab-9053-4e34-80ac-ce2a57077b41", "record_id": "flaws_cloudtrail:0000135:eec75fab-9053-4e34-80ac-ce2a57077b41", "row_index": 135, "timestamp": "2017-02-12T20:38:21Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec75fab-9053-4e34-80ac-ce2a57077b41", "eventTime": "2017-02-12T20:38:21Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d48bf14-cc3f-4fa3-b604-1e272dc51c5d", "record_id": "flaws_cloudtrail:0000136:8d48bf14-cc3f-4fa3-b604-1e272dc51c5d", "row_index": 136, "timestamp": "2017-02-12T20:38:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d48bf14-cc3f-4fa3-b604-1e272dc51c5d", "eventTime": "2017-02-12T20:38:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a84745-3967-409f-bdcd-389a2bc1d5af", "record_id": "flaws_cloudtrail:0000137:61a84745-3967-409f-bdcd-389a2bc1d5af", "row_index": 137, "timestamp": "2017-02-12T20:38:21Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a84745-3967-409f-bdcd-389a2bc1d5af", "eventTime": "2017-02-12T20:38:21Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13a08591-5451-4920-8e54-f63c3e89efb3", "record_id": "flaws_cloudtrail:0000138:13a08591-5451-4920-8e54-f63c3e89efb3", "row_index": 138, "timestamp": "2017-02-12T20:38:21Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13a08591-5451-4920-8e54-f63c3e89efb3", "eventTime": "2017-02-12T20:38:21Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5da527-78fe-473e-b1bf-1e20ff4019ba", "record_id": "flaws_cloudtrail:0000139:ad5da527-78fe-473e-b1bf-1e20ff4019ba", "row_index": 139, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5da527-78fe-473e-b1bf-1e20ff4019ba", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "618d211a-5126-430f-b259-aca37efe8e53", "record_id": "flaws_cloudtrail:0000140:618d211a-5126-430f-b259-aca37efe8e53", "row_index": 140, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "618d211a-5126-430f-b259-aca37efe8e53", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a16c2e0-2467-4197-b9d5-2621f680a755", "record_id": "flaws_cloudtrail:0000141:0a16c2e0-2467-4197-b9d5-2621f680a755", "row_index": 141, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a16c2e0-2467-4197-b9d5-2621f680a755", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "608c35eb-253f-42b8-9b85-53ee61735", "record_id": "flaws_cloudtrail:0000142:608c35eb-253f-42b8-9b85-53ee61735", "row_index": 142, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "608c35eb-253f-42b8-9b85-53ee61735", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a86ec3a-ed47-4538-9a06-e7d552038b91e", "record_id": "flaws_cloudtrail:0000143:0a86ec3a-ed47-4538-9a06-e7d552038b91e", "row_index": 143, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a86ec3a-ed47-4538-9a06-e7d552038b91e", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68e36a6c-0534-4419-a6d5-1539be6ef72c", "record_id": "flaws_cloudtrail:0000144:68e36a6c-0534-4419-a6d5-1539be6ef72c", "row_index": 144, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68e36a6c-0534-4419-a6d5-1539be6ef72c", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ad4db4-dfe0-4b17-9763-911cf5ad16e5", "record_id": "flaws_cloudtrail:0000145:61ad4db4-dfe0-4b17-9763-911cf5ad16e5", "row_index": 145, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ad4db4-dfe0-4b17-9763-911cf5ad16e5", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e7b6a4-8c74-413d-ae50-6cbe5d595205b", "record_id": "flaws_cloudtrail:0000146:e8e7b6a4-8c74-413d-ae50-6cbe5d595205b", "row_index": 146, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e7b6a4-8c74-413d-ae50-6cbe5d595205b", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b292f9c-7d33-4b84-87ef-ad454f2881a3", "record_id": "flaws_cloudtrail:0000147:0b292f9c-7d33-4b84-87ef-ad454f2881a3", "row_index": 147, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b292f9c-7d33-4b84-87ef-ad454f2881a3", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b45d68d-36c6-400d-b4a6-662720e233e52", "record_id": "flaws_cloudtrail:0000148:9b45d68d-36c6-400d-b4a6-662720e233e52", "row_index": 148, "timestamp": "2017-02-12T20:38:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b45d68d-36c6-400d-b4a6-662720e233e52", "eventTime": "2017-02-12T20:38:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43f300874-24b8-4780-9e2b-97667ba6aa2a", "record_id": "flaws_cloudtrail:0000149:43f300874-24b8-4780-9e2b-97667ba6aa2a", "row_index": 149, "timestamp": "2017-02-12T20:38:42Z", "event_type": "PutBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43f300874-24b8-4780-9e2b-97667ba6aa2a", "eventTime": "2017-02-12T20:38:42Z", "eventName": "PutBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""], "WebsiteConfiguration": {"IndexDocument": {"Suffix": "index.html"}, "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21855f23-ce6f-4ae7-a400-521396acf6", "record_id": "flaws_cloudtrail:0000150:21855f23-ce6f-4ae7-a400-521396acf6", "row_index": 150, "timestamp": "2017-02-12T20:38:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21855f23-ce6f-4ae7-a400-521396acf6", "eventTime": "2017-02-12T20:38:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b94c124-b3be-42dc-9707-c9f0427b6431", "record_id": "flaws_cloudtrail:0000151:4b94c124-b3be-42dc-9707-c9f0427b6431", "row_index": 151, "timestamp": "2017-02-12T20:38:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b94c124-b3be-42dc-9707-c9f0427b6431", "eventTime": "2017-02-12T20:38:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8353f245-f908-4c9c-ad71-29c75ed06d8f", "record_id": "flaws_cloudtrail:0000152:8353f245-f908-4c9c-ad71-29c75ed06d8f", "row_index": 152, "timestamp": "2017-02-12T20:38:47Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8353f245-f908-4c9c-ad71-29c75ed06d8f", "eventTime": "2017-02-12T20:38:47Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4845f668-2200-4f94-974e-3c2875eeacac", "record_id": "flaws_cloudtrail:0000153:4845f668-2200-4f94-974e-3c2875eeacac", "row_index": 153, "timestamp": "2017-02-12T20:38:48Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4845f668-2200-4f94-974e-3c2875eeacac", "eventTime": "2017-02-12T20:38:48Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b94ba84-7c04-4f77-b73f-e7e12e0aef5f", "record_id": "flaws_cloudtrail:0000154:6b94ba84-7c04-4f77-b73f-e7e12e0aef5f", "row_index": 154, "timestamp": "2017-02-12T20:38:48Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b94ba84-7c04-4f77-b73f-e7e12e0aef5f", "eventTime": "2017-02-12T20:38:48Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99cba7e2-25dc-4bcd-aba8-92ce2fc31c1d", "record_id": "flaws_cloudtrail:0000155:99cba7e2-25dc-4bcd-aba8-92ce2fc31c1d", "row_index": 155, "timestamp": "2017-02-12T20:38:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99cba7e2-25dc-4bcd-aba8-92ce2fc31c1d", "eventTime": "2017-02-12T20:38:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17a11723-28eb-4eae-8889-150d8ef4fb87", "record_id": "flaws_cloudtrail:0000156:17a11723-28eb-4eae-8889-150d8ef4fb87", "row_index": 156, "timestamp": "2017-02-12T20:38:48Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17a11723-28eb-4eae-8889-150d8ef4fb87", "eventTime": "2017-02-12T20:38:48Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1709ac04-09f2-44c6-8546-de48d1072dab", "record_id": "flaws_cloudtrail:0000157:1709ac04-09f2-44c6-8546-de48d1072dab", "row_index": 157, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1709ac04-09f2-44c6-8546-de48d1072dab", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3be0d11-1167-44e1-aa54-31e0f8fdccea", "record_id": "flaws_cloudtrail:0000158:a3be0d11-1167-44e1-aa54-31e0f8fdccea", "row_index": 158, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3be0d11-1167-44e1-aa54-31e0f8fdccea", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128a11fa-acb0-4f74-b916-da2754d271a9", "record_id": "flaws_cloudtrail:0000159:128a11fa-acb0-4f74-b916-da2754d271a9", "row_index": 159, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128a11fa-acb0-4f74-b916-da2754d271a9", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9788f00-5f3f-4b4d-83a8-82d694c9b2b3", "record_id": "flaws_cloudtrail:0000160:b9788f00-5f3f-4b4d-83a8-82d694c9b2b3", "row_index": 160, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9788f00-5f3f-4b4d-83a8-82d694c9b2b3", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1da44cf-aad7-431f-af0d-616a1faba853", "record_id": "flaws_cloudtrail:0000161:e1da44cf-aad7-431f-af0d-616a1faba853", "row_index": 161, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1da44cf-aad7-431f-af0d-616a1faba853", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "438b89fd-334a-433a-9852-961c359592", "record_id": "flaws_cloudtrail:0000162:438b89fd-334a-433a-9852-961c359592", "row_index": 162, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "438b89fd-334a-433a-9852-961c359592", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b769614-a548-4da5-a069-f362ebc90820", "record_id": "flaws_cloudtrail:0000163:b769614-a548-4da5-a069-f362ebc90820", "row_index": 163, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b769614-a548-4da5-a069-f362ebc90820", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba17c964-cbbf-4692-bd87-c384c7773c4d", "record_id": "flaws_cloudtrail:0000164:ba17c964-cbbf-4692-bd87-c384c7773c4d", "row_index": 164, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba17c964-cbbf-4692-bd87-c384c7773c4d", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5c6e816-bf55-41e0-9444-9f0915da8e2a", "record_id": "flaws_cloudtrail:0000165:d5c6e816-bf55-41e0-9444-9f0915da8e2a", "row_index": 165, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5c6e816-bf55-41e0-9444-9f0915da8e2a", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d791fb48-5072-406a-a372-a6f8cce2944b", "record_id": "flaws_cloudtrail:0000166:d791fb48-5072-406a-a372-a6f8cce2944b", "row_index": 166, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d791fb48-5072-406a-a372-a6f8cce2944b", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31c215891-3592-4a11-a2f7-b2ae84ef2769", "record_id": "flaws_cloudtrail:0000167:31c215891-3592-4a11-a2f7-b2ae84ef2769", "row_index": 167, "timestamp": "2017-02-12T20:38:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31c215891-3592-4a11-a2f7-b2ae84ef2769", "eventTime": "2017-02-12T20:38:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "114e67a0-8c0a-4e33-a03b-d3a180824a66", "record_id": "flaws_cloudtrail:0000168:114e67a0-8c0a-4e33-a03b-d3a180824a66", "row_index": 168, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "114e67a0-8c0a-4e33-a03b-d3a180824a66", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac470e06-5cc0-43f6-8b19-dca6e655f85a", "record_id": "flaws_cloudtrail:0000169:ac470e06-5cc0-43f6-8b19-dca6e655f85a", "row_index": 169, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac470e06-5cc0-43f6-8b19-dca6e655f85a", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec5bb53-9058-4ea7-acdd-aef950d90b66", "record_id": "flaws_cloudtrail:0000170:7ec5bb53-9058-4ea7-acdd-aef950d90b66", "row_index": 170, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec5bb53-9058-4ea7-acdd-aef950d90b66", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "582d3292-d3a8-4abb-b28d-8065187a6789", "record_id": "flaws_cloudtrail:0000171:582d3292-d3a8-4abb-b28d-8065187a6789", "row_index": 171, "timestamp": "2017-02-12T20:39:00Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "582d3292-d3a8-4abb-b28d-8065187a6789", "eventTime": "2017-02-12T20:39:00Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc0e2c2a-c807-4193-9ae1-83ea7dcd3f1d", "record_id": "flaws_cloudtrail:0000172:dc0e2c2a-c807-4193-9ae1-83ea7dcd3f1d", "row_index": 172, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc0e2c2a-c807-4193-9ae1-83ea7dcd3f1d", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aca66b4-b9f6-49a6-838f-bdedb6bc43f6", "record_id": "flaws_cloudtrail:0000173:2aca66b4-b9f6-49a6-838f-bdedb6bc43f6", "row_index": 173, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aca66b4-b9f6-49a6-838f-bdedb6bc43f6", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c69e23c-a5ad-4016-88c5-1d1eb561180", "record_id": "flaws_cloudtrail:0000174:5c69e23c-a5ad-4016-88c5-1d1eb561180", "row_index": 174, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c69e23c-a5ad-4016-88c5-1d1eb561180", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b409dab1-1e27-4e5f-ace7-e1ade368acf9", "record_id": "flaws_cloudtrail:0000175:b409dab1-1e27-4e5f-ace7-e1ade368acf9", "row_index": 175, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b409dab1-1e27-4e5f-ace7-e1ade368acf9", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43fc0082-018e-4f2e-b7e8-473a54ca596a", "record_id": "flaws_cloudtrail:0000176:43fc0082-018e-4f2e-b7e8-473a54ca596a", "row_index": 176, "timestamp": "2017-02-12T20:39:00Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43fc0082-018e-4f2e-b7e8-473a54ca596a", "eventTime": "2017-02-12T20:39:00Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b98def0-09ec-49b0-b145-8abd336d6748", "record_id": "flaws_cloudtrail:0000177:4b98def0-09ec-49b0-b145-8abd336d6748", "row_index": 177, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b98def0-09ec-49b0-b145-8abd336d6748", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f6c323-52f9-4591-b9b7-0401c67fcbbd", "record_id": "flaws_cloudtrail:0000178:e3f6c323-52f9-4591-b9b7-0401c67fcbbd", "row_index": 178, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f6c323-52f9-4591-b9b7-0401c67fcbbd", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c935b7ee-f9a1-47a2-b4db-01d72a534781", "record_id": "flaws_cloudtrail:0000179:c935b7ee-f9a1-47a2-b4db-01d72a534781", "row_index": 179, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c935b7ee-f9a1-47a2-b4db-01d72a534781", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3a90b7-9536-4711-bbd2-38eee22273e", "record_id": "flaws_cloudtrail:0000180:ec3a90b7-9536-4711-bbd2-38eee22273e", "row_index": 180, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3a90b7-9536-4711-bbd2-38eee22273e", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e36f60d-ca5c-423a-b44c-55f64600c1b7", "record_id": "flaws_cloudtrail:0000181:4e36f60d-ca5c-423a-b44c-55f64600c1b7", "row_index": 181, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e36f60d-ca5c-423a-b44c-55f64600c1b7", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc62390-4530-424a-af61-9124dd5b40b9", "record_id": "flaws_cloudtrail:0000182:cc62390-4530-424a-af61-9124dd5b40b9", "row_index": 182, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc62390-4530-424a-af61-9124dd5b40b9", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b17200-4fdb-48c4-84a1-837afab56dc1", "record_id": "flaws_cloudtrail:0000183:1b17200-4fdb-48c4-84a1-837afab56dc1", "row_index": 183, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b17200-4fdb-48c4-84a1-837afab56dc1", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3dba3e8-e1c1-435a-be28-20537c07eca6", "record_id": "flaws_cloudtrail:0000184:e3dba3e8-e1c1-435a-be28-20537c07eca6", "row_index": 184, "timestamp": "2017-02-12T20:39:00Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3dba3e8-e1c1-435a-be28-20537c07eca6", "eventTime": "2017-02-12T20:39:00Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9db0467e-546e-41e8-a426-4a5bd33d67e3", "record_id": "flaws_cloudtrail:0000185:9db0467e-546e-41e8-a426-4a5bd33d67e3", "row_index": 185, "timestamp": "2017-02-12T20:39:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9db0467e-546e-41e8-a426-4a5bd33d67e3", "eventTime": "2017-02-12T20:39:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c4873d5-28d1-441c-8d21-f6eb9238d069", "record_id": "flaws_cloudtrail:0000186:3c4873d5-28d1-441c-8d21-f6eb9238d069", "row_index": 186, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c4873d5-28d1-441c-8d21-f6eb9238d069", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "512ceca4-c0f3-4d05-a3e4-4e8c5a38b812", "record_id": "flaws_cloudtrail:0000187:512ceca4-c0f3-4d05-a3e4-4e8c5a38b812", "row_index": 187, "timestamp": "2017-02-12T20:39:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "512ceca4-c0f3-4d05-a3e4-4e8c5a38b812", "eventTime": "2017-02-12T20:39:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c04d88c-1ef1-437f-9bb5-3ad2adf2c5eb", "record_id": "flaws_cloudtrail:0000188:6c04d88c-1ef1-437f-9bb5-3ad2adf2c5eb", "row_index": 188, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c04d88c-1ef1-437f-9bb5-3ad2adf2c5eb", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09558-f624-4448-8fc7-93b003809fc91", "record_id": "flaws_cloudtrail:0000189:09558-f624-4448-8fc7-93b003809fc91", "row_index": 189, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09558-f624-4448-8fc7-93b003809fc91", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bf0bc97-e6d9-4bc9-a38a-8166729d2a75", "record_id": "flaws_cloudtrail:0000190:4bf0bc97-e6d9-4bc9-a38a-8166729d2a75", "row_index": 190, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bf0bc97-e6d9-4bc9-a38a-8166729d2a75", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f59c545c-a95e-4859-bb04-c912da5b866e", "record_id": "flaws_cloudtrail:0000191:f59c545c-a95e-4859-bb04-c912da5b866e", "row_index": 191, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f59c545c-a95e-4859-bb04-c912da5b866e", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "699af15e-1f66-4039-ab9d-fe61ba07523b", "record_id": "flaws_cloudtrail:0000192:699af15e-1f66-4039-ab9d-fe61ba07523b", "row_index": 192, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "699af15e-1f66-4039-ab9d-fe61ba07523b", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61645bbe-f15b-4bb0-a292-16d5ca5f1bbd", "record_id": "flaws_cloudtrail:0000193:61645bbe-f15b-4bb0-a292-16d5ca5f1bbd", "row_index": 193, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61645bbe-f15b-4bb0-a292-16d5ca5f1bbd", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89734ed-49b9-417e-bd70-64a73c0f6715", "record_id": "flaws_cloudtrail:0000194:89734ed-49b9-417e-bd70-64a73c0f6715", "row_index": 194, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89734ed-49b9-417e-bd70-64a73c0f6715", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81c8a724-78c8-4374-bb5a-21cad21accf3", "record_id": "flaws_cloudtrail:0000195:81c8a724-78c8-4374-bb5a-21cad21accf3", "row_index": 195, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81c8a724-78c8-4374-bb5a-21cad21accf3", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54ffb55a-8b91-46a3-917d-f8227946c79a", "record_id": "flaws_cloudtrail:0000196:54ffb55a-8b91-46a3-917d-f8227946c79a", "row_index": 196, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54ffb55a-8b91-46a3-917d-f8227946c79a", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e7c0e26-0ef8-4aaf-8ba3-9a29773b7f", "record_id": "flaws_cloudtrail:0000197:5e7c0e26-0ef8-4aaf-8ba3-9a29773b7f", "row_index": 197, "timestamp": "2017-02-12T20:39:02Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e7c0e26-0ef8-4aaf-8ba3-9a29773b7f", "eventTime": "2017-02-12T20:39:02Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f38539-4137-4ea4-a991-dd460f51694", "record_id": "flaws_cloudtrail:0000198:1f38539-4137-4ea4-a991-dd460f51694", "row_index": 198, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f38539-4137-4ea4-a991-dd460f51694", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d51d3e55-7c05-440c-a0f5-040f9c6992b6", "record_id": "flaws_cloudtrail:0000199:d51d3e55-7c05-440c-a0f5-040f9c6992b6", "row_index": 199, "timestamp": "2017-02-12T20:39:02Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d51d3e55-7c05-440c-a0f5-040f9c6992b6", "eventTime": "2017-02-12T20:39:02Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ddaf0d4-13d3-4872-a8fa-b864e3ee429a", "record_id": "flaws_cloudtrail:0000200:9ddaf0d4-13d3-4872-a8fa-b864e3ee429a", "row_index": 200, "timestamp": "2017-02-12T20:39:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ddaf0d4-13d3-4872-a8fa-b864e3ee429a", "eventTime": "2017-02-12T20:39:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c661ba21-e4ca-4b66-8ba0-2d736a895b3c", "record_id": "flaws_cloudtrail:0000201:c661ba21-e4ca-4b66-8ba0-2d736a895b3c", "row_index": 201, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c661ba21-e4ca-4b66-8ba0-2d736a895b3c", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b42561-44c7-482d-bc5d-6c8a4456006f", "record_id": "flaws_cloudtrail:0000202:b42561-44c7-482d-bc5d-6c8a4456006f", "row_index": 202, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b42561-44c7-482d-bc5d-6c8a4456006f", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e071d4f3-1b88-48d0-ab47-672355cf7f4", "record_id": "flaws_cloudtrail:0000203:e071d4f3-1b88-48d0-ab47-672355cf7f4", "row_index": 203, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e071d4f3-1b88-48d0-ab47-672355cf7f4", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9ece9b-b111-454b-85f7-dc883551", "record_id": "flaws_cloudtrail:0000204:0d9ece9b-b111-454b-85f7-dc883551", "row_index": 204, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9ece9b-b111-454b-85f7-dc883551", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f0ddf2-be29-49cc-b6c8-c60c6401c747", "record_id": "flaws_cloudtrail:0000205:11f0ddf2-be29-49cc-b6c8-c60c6401c747", "row_index": 205, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f0ddf2-be29-49cc-b6c8-c60c6401c747", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27600e-4eb2-4c10-b4b9-d96310e", "record_id": "flaws_cloudtrail:0000206:27600e-4eb2-4c10-b4b9-d96310e", "row_index": 206, "timestamp": "2017-02-12T20:43:39Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27600e-4eb2-4c10-b4b9-d96310e", "eventTime": "2017-02-12T20:43:39Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7da8dc2-f68f-4fd9-8d7c-0a95f820c0ca", "record_id": "flaws_cloudtrail:0000207:f7da8dc2-f68f-4fd9-8d7c-0a95f820c0ca", "row_index": 207, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7da8dc2-f68f-4fd9-8d7c-0a95f820c0ca", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20e4006-0e53-416c-b3ae-4e5d16ca42bc", "record_id": "flaws_cloudtrail:0000208:b20e4006-0e53-416c-b3ae-4e5d16ca42bc", "row_index": 208, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20e4006-0e53-416c-b3ae-4e5d16ca42bc", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88507bbe-f442-4ea2-a526-ee27e4b069db", "record_id": "flaws_cloudtrail:0000209:88507bbe-f442-4ea2-a526-ee27e4b069db", "row_index": 209, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88507bbe-f442-4ea2-a526-ee27e4b069db", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51fcf276-eecd-4e19-a4b4-5376d15acfbd", "record_id": "flaws_cloudtrail:0000210:51fcf276-eecd-4e19-a4b4-5376d15acfbd", "row_index": 210, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51fcf276-eecd-4e19-a4b4-5376d15acfbd", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea65a759-f2d2-4c29-ac5e-a8ebe9bc2280", "record_id": "flaws_cloudtrail:0000211:ea65a759-f2d2-4c29-ac5e-a8ebe9bc2280", "row_index": 211, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea65a759-f2d2-4c29-ac5e-a8ebe9bc2280", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e77e578-b461-49bd-bbb8-cc595227d1831", "record_id": "flaws_cloudtrail:0000212:9e77e578-b461-49bd-bbb8-cc595227d1831", "row_index": 212, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e77e578-b461-49bd-bbb8-cc595227d1831", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c9765f8-5bd7-4009-8b71-2b806ed0e835", "record_id": "flaws_cloudtrail:0000213:1c9765f8-5bd7-4009-8b71-2b806ed0e835", "row_index": 213, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c9765f8-5bd7-4009-8b71-2b806ed0e835", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf038d3-7170-4970-b340-b0e70285f8", "record_id": "flaws_cloudtrail:0000214:caf038d3-7170-4970-b340-b0e70285f8", "row_index": 214, "timestamp": "2017-02-12T20:43:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf038d3-7170-4970-b340-b0e70285f8", "eventTime": "2017-02-12T20:43:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e892d20-f07d-4d09-8653-56cfc528250", "record_id": "flaws_cloudtrail:0000215:5e892d20-f07d-4d09-8653-56cfc528250", "row_index": 215, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e892d20-f07d-4d09-8653-56cfc528250", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d79734-3a1b-48b0-b2e3-14fcadae239d", "record_id": "flaws_cloudtrail:0000216:4d79734-3a1b-48b0-b2e3-14fcadae239d", "row_index": 216, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d79734-3a1b-48b0-b2e3-14fcadae239d", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61dd6cfb-b097-4364-b95c-c81ead721c41", "record_id": "flaws_cloudtrail:0000217:61dd6cfb-b097-4364-b95c-c81ead721c41", "row_index": 217, "timestamp": "2017-02-12T20:43:39Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61dd6cfb-b097-4364-b95c-c81ead721c41", "eventTime": "2017-02-12T20:43:39Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b2978f-3133-4ba3-8731-7f7be9c48d6b", "record_id": "flaws_cloudtrail:0000218:52b2978f-3133-4ba3-8731-7f7be9c48d6b", "row_index": 218, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b2978f-3133-4ba3-8731-7f7be9c48d6b", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7240e323-6d6e-4856-9ccb-d1001160d506", "record_id": "flaws_cloudtrail:0000219:7240e323-6d6e-4856-9ccb-d1001160d506", "row_index": 219, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7240e323-6d6e-4856-9ccb-d1001160d506", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9439a1f7-157e-4d88-bddf-de2ac880f157", "record_id": "flaws_cloudtrail:0000220:9439a1f7-157e-4d88-bddf-de2ac880f157", "row_index": 220, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9439a1f7-157e-4d88-bddf-de2ac880f157", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43b9af57-8371-43b4-b812-b9c18bf171d1", "record_id": "flaws_cloudtrail:0000221:43b9af57-8371-43b4-b812-b9c18bf171d1", "row_index": 221, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43b9af57-8371-43b4-b812-b9c18bf171d1", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b42b586-f4bb-41f6-a8ef-c2a31786b6e3", "record_id": "flaws_cloudtrail:0000222:3b42b586-f4bb-41f6-a8ef-c2a31786b6e3", "row_index": 222, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b42b586-f4bb-41f6-a8ef-c2a31786b6e3", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "935b6fd1-562e-40a1-b261-9837ad45d3bd", "record_id": "flaws_cloudtrail:0000223:935b6fd1-562e-40a1-b261-9837ad45d3bd", "row_index": 223, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "935b6fd1-562e-40a1-b261-9837ad45d3bd", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0da01c5c-60ca-4386-aa5d-996d093a3669", "record_id": "flaws_cloudtrail:0000224:0da01c5c-60ca-4386-aa5d-996d093a3669", "row_index": 224, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0da01c5c-60ca-4386-aa5d-996d093a3669", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b0a0a3a-e9de-4a84-903a-b187a9d551e6", "record_id": "flaws_cloudtrail:0000225:2b0a0a3a-e9de-4a84-903a-b187a9d551e6", "row_index": 225, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b0a0a3a-e9de-4a84-903a-b187a9d551e6", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3035fc8-a962-467f-8971-eb2fb413217", "record_id": "flaws_cloudtrail:0000226:f3035fc8-a962-467f-8971-eb2fb413217", "row_index": 226, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3035fc8-a962-467f-8971-eb2fb413217", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d18ae50-5b1a-4f86-a9e5-f22380e859ca", "record_id": "flaws_cloudtrail:0000227:8d18ae50-5b1a-4f86-a9e5-f22380e859ca", "row_index": 227, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d18ae50-5b1a-4f86-a9e5-f22380e859ca", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bcb5d5-4ee7-4db8-a1b0-d0578d2c3701", "record_id": "flaws_cloudtrail:0000228:e2bcb5d5-4ee7-4db8-a1b0-d0578d2c3701", "row_index": 228, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bcb5d5-4ee7-4db8-a1b0-d0578d2c3701", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5f361a-1ea2-4bbf-9691-964bdb99e694", "record_id": "flaws_cloudtrail:0000229:2d5f361a-1ea2-4bbf-9691-964bdb99e694", "row_index": 229, "timestamp": "2017-02-12T20:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5f361a-1ea2-4bbf-9691-964bdb99e694", "eventTime": "2017-02-12T20:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eea380333-0c14-4c4e-a511-49d047a64f30", "record_id": "flaws_cloudtrail:0000230:eea380333-0c14-4c4e-a511-49d047a64f30", "row_index": 230, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eea380333-0c14-4c4e-a511-49d047a64f30", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90b61cd0-a126-46bc-8370-6affb6123c67", "record_id": "flaws_cloudtrail:0000231:90b61cd0-a126-46bc-8370-6affb6123c67", "row_index": 231, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90b61cd0-a126-46bc-8370-6affb6123c67", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a2b792-814e-4291-8679-985bc01cf856", "record_id": "flaws_cloudtrail:0000232:10a2b792-814e-4291-8679-985bc01cf856", "row_index": 232, "timestamp": "2017-02-12T20:43:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a2b792-814e-4291-8679-985bc01cf856", "eventTime": "2017-02-12T20:43:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4131e3e-bdf7-4419-bea8-6217b31884ff", "record_id": "flaws_cloudtrail:0000233:b4131e3e-bdf7-4419-bea8-6217b31884ff", "row_index": 233, "timestamp": "2017-02-12T20:43:41Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIALDOGXGOQA5IF2TC7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4131e3e-bdf7-4419-bea8-6217b31884ff", "eventTime": "2017-02-12T20:43:41Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIALDOGXGOQA5IF2TC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37bb59fe-eb3a-4822-881f-db45e5c9ad37", "record_id": "flaws_cloudtrail:0000234:37bb59fe-eb3a-4822-881f-db45e5c9ad37", "row_index": 234, "timestamp": "2017-02-12T20:44:05Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37bb59fe-eb3a-4822-881f-db45e5c9ad37", "eventTime": "2017-02-12T20:44:05Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1952be00-ed1a-465a-a85d-b272855422e5", "record_id": "flaws_cloudtrail:0000235:1952be00-ed1a-465a-a85d-b272855422e5", "row_index": 235, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1952be00-ed1a-465a-a85d-b272855422e5", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c23fe2ad-3116-4110-aa83-d1e91eb2a8ab", "record_id": "flaws_cloudtrail:0000236:c23fe2ad-3116-4110-aa83-d1e91eb2a8ab", "row_index": 236, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c23fe2ad-3116-4110-aa83-d1e91eb2a8ab", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d39a1664-58ab-49d8-81ea-2a09698f1efe", "record_id": "flaws_cloudtrail:0000237:d39a1664-58ab-49d8-81ea-2a09698f1efe", "row_index": 237, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d39a1664-58ab-49d8-81ea-2a09698f1efe", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf1cb20e-130d-41f5-8d29-e9c079955f953", "record_id": "flaws_cloudtrail:0000238:bf1cb20e-130d-41f5-8d29-e9c079955f953", "row_index": 238, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf1cb20e-130d-41f5-8d29-e9c079955f953", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef970f4-bb92-4430-bac0-046261b0131d2", "record_id": "flaws_cloudtrail:0000239:1ef970f4-bb92-4430-bac0-046261b0131d2", "row_index": 239, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef970f4-bb92-4430-bac0-046261b0131d2", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb8be349-57d5-43df-922b-fa9ba787db6d", "record_id": "flaws_cloudtrail:0000240:bb8be349-57d5-43df-922b-fa9ba787db6d", "row_index": 240, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb8be349-57d5-43df-922b-fa9ba787db6d", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d4b9526-224c-48a3-9ff4-f0675d51c11a", "record_id": "flaws_cloudtrail:0000241:5d4b9526-224c-48a3-9ff4-f0675d51c11a", "row_index": 241, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d4b9526-224c-48a3-9ff4-f0675d51c11a", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedd7797-760d-464f-a610-d38397f79c3", "record_id": "flaws_cloudtrail:0000242:fedd7797-760d-464f-a610-d38397f79c3", "row_index": 242, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedd7797-760d-464f-a610-d38397f79c3", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "958528b95-dc0f-4d94-92aa-373731805a2c", "record_id": "flaws_cloudtrail:0000243:958528b95-dc0f-4d94-92aa-373731805a2c", "row_index": 243, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "958528b95-dc0f-4d94-92aa-373731805a2c", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fac020a7-3554-40ff-8e1c-403acb94630d", "record_id": "flaws_cloudtrail:0000244:fac020a7-3554-40ff-8e1c-403acb94630d", "row_index": 244, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fac020a7-3554-40ff-8e1c-403acb94630d", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c4645e-e817-4ba8-8788-51a63e84652", "record_id": "flaws_cloudtrail:0000245:d1c4645e-e817-4ba8-8788-51a63e84652", "row_index": 245, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c4645e-e817-4ba8-8788-51a63e84652", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27d0b3e-c11e-4b67-88b8-50b19a8a8169", "record_id": "flaws_cloudtrail:0000246:d27d0b3e-c11e-4b67-88b8-50b19a8a8169", "row_index": 246, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27d0b3e-c11e-4b67-88b8-50b19a8a8169", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ca3ef29-b526-4aa6-9906-8d72bdf80fb1", "record_id": "flaws_cloudtrail:0000247:8ca3ef29-b526-4aa6-9906-8d72bdf80fb1", "row_index": 247, "timestamp": "2017-02-12T20:44:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIARQYEDNXPHL7HT9YP", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "85.50.251.255", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ca3ef29-b526-4aa6-9906-8d72bdf80fb1", "eventTime": "2017-02-12T20:44:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "85.50.251.255", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIARQYEDNXPHL7HT9YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b80c6c-0f39-4e8a-a3e2-40e6a30ea4f5", "record_id": "flaws_cloudtrail:0000248:d7b80c6c-0f39-4e8a-a3e2-40e6a30ea4f5", "row_index": 248, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b80c6c-0f39-4e8a-a3e2-40e6a30ea4f5", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de00df7f-2991-4db5-8f49-16f952940ddb", "record_id": "flaws_cloudtrail:0000249:de00df7f-2991-4db5-8f49-16f952940ddb", "row_index": 249, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de00df7f-2991-4db5-8f49-16f952940ddb", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d2115c-a7cf-47c8-852b-bc756036a5e8", "record_id": "flaws_cloudtrail:0000250:97d2115c-a7cf-47c8-852b-bc756036a5e8", "row_index": 250, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d2115c-a7cf-47c8-852b-bc756036a5e8", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e863fba-8493-455f-83e0-de067cf1bc0c", "record_id": "flaws_cloudtrail:0000251:1e863fba-8493-455f-83e0-de067cf1bc0c", "row_index": 251, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e863fba-8493-455f-83e0-de067cf1bc0c", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ca5005-e96b-4219-a10c-5d4ded13dd06", "record_id": "flaws_cloudtrail:0000252:56ca5005-e96b-4219-a10c-5d4ded13dd06", "row_index": 252, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ca5005-e96b-4219-a10c-5d4ded13dd06", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "525429-5002-4c6a-8b27-c16eacc4337d", "record_id": "flaws_cloudtrail:0000253:525429-5002-4c6a-8b27-c16eacc4337d", "row_index": 253, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "525429-5002-4c6a-8b27-c16eacc4337d", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31d6982-d6a4-4283-90d2-f105e21906", "record_id": "flaws_cloudtrail:0000254:a31d6982-d6a4-4283-90d2-f105e21906", "row_index": 254, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31d6982-d6a4-4283-90d2-f105e21906", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d670fc-18de-40ce-b4bd-97627c46020f", "record_id": "flaws_cloudtrail:0000255:d1d670fc-18de-40ce-b4bd-97627c46020f", "row_index": 255, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d670fc-18de-40ce-b4bd-97627c46020f", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd04a9b-e475-4b1a-aad6-9abe81831f1", "record_id": "flaws_cloudtrail:0000256:8bd04a9b-e475-4b1a-aad6-9abe81831f1", "row_index": 256, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd04a9b-e475-4b1a-aad6-9abe81831f1", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc46e98-bad3-46ab-b97e-f68de48abc3e", "record_id": "flaws_cloudtrail:0000257:dfc46e98-bad3-46ab-b97e-f68de48abc3e", "row_index": 257, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc46e98-bad3-46ab-b97e-f68de48abc3e", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4445a88-8e8c-46bf-9b4d-e71f0b8fe424", "record_id": "flaws_cloudtrail:0000258:a4445a88-8e8c-46bf-9b4d-e71f0b8fe424", "row_index": 258, "timestamp": "2017-02-12T20:44:54Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAM7GA3QNA32D5P3MC", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "178.188.9.103", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4445a88-8e8c-46bf-9b4d-e71f0b8fe424", "eventTime": "2017-02-12T20:44:54Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "178.188.9.103", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAM7GA3QNA32D5P3MC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59007-eea2-4680-9d8b-4ad518bd6237", "record_id": "flaws_cloudtrail:0000259:59007-eea2-4680-9d8b-4ad518bd6237", "row_index": 259, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59007-eea2-4680-9d8b-4ad518bd6237", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"DescribeHostsRequest": {"Filter": {"Value": {"tag": "1", "content": "available"}, "tag": "1", "Name": "state"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d6f95e3-7ec5-499c-9faf-8c4ee0068dc3", "record_id": "flaws_cloudtrail:0000260:7d6f95e3-7ec5-499c-9faf-8c4ee0068dc3", "row_index": 260, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d6f95e3-7ec5-499c-9faf-8c4ee0068dc3", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "supported-platforms"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52e001a-8811-4a39-bef0-0fb80f94fd4c", "record_id": "flaws_cloudtrail:0000261:b52e001a-8811-4a39-bef0-0fb80f94fd4c", "row_index": 261, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52e001a-8811-4a39-bef0-0fb80f94fd4c", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef577786c-1715-4503-9bc9-9baf38e0cc43", "record_id": "flaws_cloudtrail:0000262:ef577786c-1715-4503-9bc9-9baf38e0cc43", "row_index": 262, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef577786c-1715-4503-9bc9-9baf38e0cc43", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3fe9ad9-25af-4c80-8c54-340f8576f824", "record_id": "flaws_cloudtrail:0000263:b3fe9ad9-25af-4c80-8c54-340f8576f824", "row_index": 263, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3fe9ad9-25af-4c80-8c54-340f8576f824", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3af591a-30d3-41d6-bdd3-c296c9fb275c", "record_id": "flaws_cloudtrail:0000264:e3af591a-30d3-41d6-bdd3-c296c9fb275c", "row_index": 264, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3af591a-30d3-41d6-bdd3-c296c9fb275c", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d51c9b48-fda2-454a-88a2-7a0892e59c72", "record_id": "flaws_cloudtrail:0000265:d51c9b48-fda2-454a-88a2-7a0892e59c72", "row_index": 265, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d51c9b48-fda2-454a-88a2-7a0892e59c72", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdadde1f-bd9f-4153-a3a9-79db9ba538953", "record_id": "flaws_cloudtrail:0000266:fdadde1f-bd9f-4153-a3a9-79db9ba538953", "row_index": 266, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdadde1f-bd9f-4153-a3a9-79db9ba538953", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "768a9ead-b900-4512-916b-64d6309ecf1f", "record_id": "flaws_cloudtrail:0000267:768a9ead-b900-4512-916b-64d6309ecf1f", "row_index": 267, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "768a9ead-b900-4512-916b-64d6309ecf1f", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f503001c-5200-43b4-a5d2-b63347cf5bc", "record_id": "flaws_cloudtrail:0000268:4f503001c-5200-43b4-a5d2-b63347cf5bc", "row_index": 268, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f503001c-5200-43b4-a5d2-b63347cf5bc", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15cab113-01bc-45e6-80f9-83b6622fa0e0", "record_id": "flaws_cloudtrail:0000269:15cab113-01bc-45e6-80f9-83b6622fa0e0", "row_index": 269, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15cab113-01bc-45e6-80f9-83b6622fa0e0", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0d0e81d-3063-4a2a-9c35-170839d1", "record_id": "flaws_cloudtrail:0000270:d0d0e81d-3063-4a2a-9c35-170839d1", "row_index": 270, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0d0e81d-3063-4a2a-9c35-170839d1", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2f33fb-9041-476d-ab04-bc0d77c612e3", "record_id": "flaws_cloudtrail:0000271:3c2f33fb-9041-476d-ab04-bc0d77c612e3", "row_index": 271, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2f33fb-9041-476d-ab04-bc0d77c612e3", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72bfa00-ba22-44c1-be2f-3f39bd96506a", "record_id": "flaws_cloudtrail:0000272:e72bfa00-ba22-44c1-be2f-3f39bd96506a", "row_index": 272, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72bfa00-ba22-44c1-be2f-3f39bd96506a", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c8d0050-8dad-454e-ac07-38e91692bd35", "record_id": "flaws_cloudtrail:0000273:8c8d0050-8dad-454e-ac07-38e91692bd35", "row_index": 273, "timestamp": "2017-02-12T20:44:55Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c8d0050-8dad-454e-ac07-38e91692bd35", "eventTime": "2017-02-12T20:44:55Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"accountAttributeNameSet": {"items": [{"attributeName": "default-vpc"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a0a341e-4808-437c-aae7-45f24d711343b", "record_id": "flaws_cloudtrail:0000274:7a0a341e-4808-437c-aae7-45f24d711343b", "row_index": 274, "timestamp": "2017-02-12T20:45:05Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a0a341e-4808-437c-aae7-45f24d711343b", "eventTime": "2017-02-12T20:45:05Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a051b6de-7b6d-4140-85dc-f0fc1a082922", "record_id": "flaws_cloudtrail:0000275:a051b6de-7b6d-4140-85dc-f0fc1a082922", "row_index": 275, "timestamp": "2017-02-12T20:45:05Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a051b6de-7b6d-4140-85dc-f0fc1a082922", "eventTime": "2017-02-12T20:45:05Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def161af-2997-485b-9587-1a354fa834f5", "record_id": "flaws_cloudtrail:0000276:def161af-2997-485b-9587-1a354fa834f5", "row_index": 276, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def161af-2997-485b-9587-1a354fa834f5", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce2e858-ec8a-43d0-ab05-0830f5e998de", "record_id": "flaws_cloudtrail:0000277:6ce2e858-ec8a-43d0-ab05-0830f5e998de", "row_index": 277, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce2e858-ec8a-43d0-ab05-0830f5e998de", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instanceId": "i-cf8e8cb731da38a5c", "attribute": "disableApiTermination"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5d1966-cb21-46b0-a74b-c3a156c84a9a", "record_id": "flaws_cloudtrail:0000278:0e5d1966-cb21-46b0-a74b-c3a156c84a9a", "row_index": 278, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5d1966-cb21-46b0-a74b-c3a156c84a9a", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d03926-ddcf-4b3c-b6f9-a15dbbe0910c", "record_id": "flaws_cloudtrail:0000279:1d03926-ddcf-4b3c-b6f9-a15dbbe0910c", "row_index": 279, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d03926-ddcf-4b3c-b6f9-a15dbbe0910c", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd7e39f-38b9-4064-abeb-99eb881a10cf", "record_id": "flaws_cloudtrail:0000280:1bd7e39f-38b9-4064-abeb-99eb881a10cf", "row_index": 280, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd7e39f-38b9-4064-abeb-99eb881a10cf", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "attachment.status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9e6141-ab84-44d9-9cfe-8a6806f4abcd", "record_id": "flaws_cloudtrail:0000281:ec9e6141-ab84-44d9-9cfe-8a6806f4abcd", "row_index": 281, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9e6141-ab84-44d9-9cfe-8a6806f4abcd", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "volume-status.status", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-name", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f614983-f4d9-4ecb-9c9c-6fc6a114079b", "record_id": "flaws_cloudtrail:0000282:96f614983-f4d9-4ecb-9c9c-6fc6a114079b", "row_index": 282, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f614983-f4d9-4ecb-9c9c-6fc6a114079b", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instanceId": "i-cf8e8cb731da38a5c", "attribute": "disableApiTermination"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39fd8ccf-dd4b-4bea-b407-909b5fd847b5", "record_id": "flaws_cloudtrail:0000283:39fd8ccf-dd4b-4bea-b407-909b5fd847b5", "row_index": 283, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39fd8ccf-dd4b-4bea-b407-909b5fd847b5", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {"items": [{"imageId": "ami-5039cdc9"}]}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5bebd30-a050-408d-89c4-a01498", "record_id": "flaws_cloudtrail:0000284:a5bebd30-a050-408d-89c4-a01498", "row_index": 284, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5bebd30-a050-408d-89c4-a01498", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c99669a-7a50-4e29-afd4-cf58bd5c1cc3", "record_id": "flaws_cloudtrail:0000285:1c99669a-7a50-4e29-afd4-cf58bd5c1cc3", "row_index": 285, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c99669a-7a50-4e29-afd4-cf58bd5c1cc3", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {"items": [{"name": "resource-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a972063bf-a9ae-47b8-a270-0fc91fde6ff7", "record_id": "flaws_cloudtrail:0000286:a972063bf-a9ae-47b8-a270-0fc91fde6ff7", "row_index": 286, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeIdFormat", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a972063bf-a9ae-47b8-a270-0fc91fde6ff7", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeIdFormat", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66da9d0e-5825-4783-8449-8b717064b5f77", "record_id": "flaws_cloudtrail:0000287:66da9d0e-5825-4783-8449-8b717064b5f77", "row_index": 287, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66da9d0e-5825-4783-8449-8b717064b5f77", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {"items": [{"imageId": "ami-5039cdc9"}]}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2435b799-745b-43b4-b919-3210dd6b33ac", "record_id": "flaws_cloudtrail:0000288:2435b799-745b-43b4-b919-3210dd6b33ac", "row_index": 288, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2435b799-745b-43b4-b919-3210dd6b33ac", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "attachment.status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22641c78-ffcc-4cdc-a7c4-3ad59963b304", "record_id": "flaws_cloudtrail:0000289:22641c78-ffcc-4cdc-a7c4-3ad59963b304", "row_index": 289, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22641c78-ffcc-4cdc-a7c4-3ad59963b304", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6805a9e7-5414-4143-bbf0-774ca0e00c2d", "record_id": "flaws_cloudtrail:0000290:6805a9e7-5414-4143-bbf0-774ca0e00c2d", "row_index": 290, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6805a9e7-5414-4143-bbf0-774ca0e00c2d", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1a899b-33a7-4337-a64b-406388b7aea7", "record_id": "flaws_cloudtrail:0000291:fb1a899b-33a7-4337-a64b-406388b7aea7", "row_index": 291, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1a899b-33a7-4337-a64b-406388b7aea7", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "volume-status.status", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-name", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df9009aa-585f-4cc9-badd-2882f3147a01", "record_id": "flaws_cloudtrail:0000292:df9009aa-585f-4cc9-badd-2882f3147a01", "row_index": 292, "timestamp": "2017-02-12T20:45:05Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df9009aa-585f-4cc9-badd-2882f3147a01", "eventTime": "2017-02-12T20:45:05Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}, "includeAllInstances": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0096d4e8-5b0a-4d1e-b1b0-2d4d4b52c8f8", "record_id": "flaws_cloudtrail:0000293:0096d4e8-5b0a-4d1e-b1b0-2d4d4b52c8f8", "row_index": 293, "timestamp": "2017-02-12T20:45:06Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0096d4e8-5b0a-4d1e-b1b0-2d4d4b52c8f8", "eventTime": "2017-02-12T20:45:06Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aedc0b47-5874-4fb5-99b1-d7f2e1ac5081", "record_id": "flaws_cloudtrail:0000294:aedc0b47-5874-4fb5-99b1-d7f2e1ac5081", "row_index": 294, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aedc0b47-5874-4fb5-99b1-d7f2e1ac5081", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instanceId": "i-cf8e8cb731da38a5c", "attribute": "disableApiTermination"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b35842a1-a641-4ed0-aa58-c2c526a2d6ab", "record_id": "flaws_cloudtrail:0000295:b35842a1-a641-4ed0-aa58-c2c526a2d6ab", "row_index": 295, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b35842a1-a641-4ed0-aa58-c2c526a2d6ab", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}, "includeAllInstances": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0d6ff49-3afb-45ec-9f94-ac18577", "record_id": "flaws_cloudtrail:0000296:d0d6ff49-3afb-45ec-9f94-ac18577", "row_index": 296, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0d6ff49-3afb-45ec-9f94-ac18577", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "attachment.status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "204238ac9-813a-49f8-8301-0445f4f7c8bc", "record_id": "flaws_cloudtrail:0000297:204238ac9-813a-49f8-8301-0445f4f7c8bc", "row_index": 297, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "204238ac9-813a-49f8-8301-0445f4f7c8bc", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-bffa6953b3bbed6d0"}]}, "filterSet": {"items": [{"name": "volume-status.status", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-name", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "volume-status.details-status", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d89a04-c6fb-46d5-a839-a086c5b8e520", "record_id": "flaws_cloudtrail:0000298:93d89a04-c6fb-46d5-a839-a086c5b8e520", "row_index": 298, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d89a04-c6fb-46d5-a839-a086c5b8e520", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}, "includeAllInstances": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a334e5-1a02-4ea5-b33c-4c98e55f22e1", "record_id": "flaws_cloudtrail:0000299:e4a334e5-1a02-4ea5-b33c-4c98e55f22e1", "row_index": 299, "timestamp": "2017-02-12T20:45:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a334e5-1a02-4ea5-b33c-4c98e55f22e1", "eventTime": "2017-02-12T20:45:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-cf8e8cb731da38a5c"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cec59ef-1f8b-4a54-b919-81e37cf515534", "record_id": "flaws_cloudtrail:0000300:2cec59ef-1f8b-4a54-b919-81e37cf515534", "row_index": 300, "timestamp": "2017-02-12T20:46:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cec59ef-1f8b-4a54-b919-81e37cf515534", "eventTime": "2017-02-12T20:46:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "492bbd28-8acc-4993-8be5-d382b6bd1d71", "record_id": "flaws_cloudtrail:0000301:492bbd28-8acc-4993-8be5-d382b6bd1d71", "row_index": 301, "timestamp": "2017-02-12T20:46:03Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "492bbd28-8acc-4993-8be5-d382b6bd1d71", "eventTime": "2017-02-12T20:46:03Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0536c943-76cc-4fd9-822a-b9b7ca805bfd", "record_id": "flaws_cloudtrail:0000302:0536c943-76cc-4fd9-822a-b9b7ca805bfd", "row_index": 302, "timestamp": "2017-02-12T20:46:03Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0536c943-76cc-4fd9-822a-b9b7ca805bfd", "eventTime": "2017-02-12T20:46:03Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030344d-f348-4d85-853a-16e39d023e11", "record_id": "flaws_cloudtrail:0000303:030344d-f348-4d85-853a-16e39d023e11", "row_index": 303, "timestamp": "2017-02-12T20:46:03Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030344d-f348-4d85-853a-16e39d023e11", "eventTime": "2017-02-12T20:46:03Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4971a9-cf67-4132-b755-4dbcea0f10d6", "record_id": "flaws_cloudtrail:0000304:5a4971a9-cf67-4132-b755-4dbcea0f10d6", "row_index": 304, "timestamp": "2017-02-12T20:46:07Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4971a9-cf67-4132-b755-4dbcea0f10d6", "eventTime": "2017-02-12T20:46:07Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77eb2767-87bd-45f7-b725-6fa76e4a82ee", "record_id": "flaws_cloudtrail:0000305:77eb2767-87bd-45f7-b725-6fa76e4a82ee", "row_index": 305, "timestamp": "2017-02-12T20:46:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77eb2767-87bd-45f7-b725-6fa76e4a82ee", "eventTime": "2017-02-12T20:46:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"pageSize": 300}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63337b13-b648-4ef6-92ca-7d70953744a0", "record_id": "flaws_cloudtrail:0000306:63337b13-b648-4ef6-92ca-7d70953744a0", "row_index": 306, "timestamp": "2017-02-12T20:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63337b13-b648-4ef6-92ca-7d70953744a0", "eventTime": "2017-02-12T20:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {"items": [{"user": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f0b290-dc57-44f6-8c43-073037f3", "record_id": "flaws_cloudtrail:0000307:52f0b290-dc57-44f6-8c43-073037f3", "row_index": 307, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f0b290-dc57-44f6-8c43-073037f3", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ba90433-fae3-4e22-898b-9008344df8ea", "record_id": "flaws_cloudtrail:0000308:5ba90433-fae3-4e22-898b-9008344df8ea", "row_index": 308, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ba90433-fae3-4e22-898b-9008344df8ea", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a72e0f-1db4-4199-91c8-4eb9a5ecb311", "record_id": "flaws_cloudtrail:0000309:b0a72e0f-1db4-4199-91c8-4eb9a5ecb311", "row_index": 309, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a72e0f-1db4-4199-91c8-4eb9a5ecb311", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd98c815-2988-460a-9071-b1506b509e49", "record_id": "flaws_cloudtrail:0000310:bd98c815-2988-460a-9071-b1506b509e49", "row_index": 310, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumeStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd98c815-2988-460a-9071-b1506b509e49", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumeStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a9490f-8280-4209-abc7-b486ea55e53e", "record_id": "flaws_cloudtrail:0000311:c1a9490f-8280-4209-abc7-b486ea55e53e", "row_index": 311, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a9490f-8280-4209-abc7-b486ea55e53e", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxResults": 10000, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b414ab92-49b5-42d4-9568-182c8fe296dc", "record_id": "flaws_cloudtrail:0000312:b414ab92-49b5-42d4-9568-182c8fe296dc", "row_index": 312, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b414ab92-49b5-42d4-9568-182c8fe296dc", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce241384-520c-4afc-b2a9-a0d9b8057bc0", "record_id": "flaws_cloudtrail:0000313:8ce241384-520c-4afc-b2a9-a0d9b8057bc0", "row_index": 313, "timestamp": "2017-02-12T20:46:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAIB6AB67SP5RKU9Z4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce241384-520c-4afc-b2a9-a0d9b8057bc0", "eventTime": "2017-02-12T20:46:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAIB6AB67SP5RKU9Z4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "availability-zone", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afc034c4-358f-403d-9778-da219ddd59e2", "record_id": "flaws_cloudtrail:0000314:afc034c4-358f-403d-9778-da219ddd59e2", "row_index": 314, "timestamp": "2017-02-12T20:48:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afc034c4-358f-403d-9778-da219ddd59e2", "eventTime": "2017-02-12T20:48:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76722fb-44bd-4ae7-86a2-626e4bb67efd", "record_id": "flaws_cloudtrail:0000315:76722fb-44bd-4ae7-86a2-626e4bb67efd", "row_index": 315, "timestamp": "2017-02-12T20:48:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76722fb-44bd-4ae7-86a2-626e4bb67efd", "eventTime": "2017-02-12T20:48:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729fab74-eb31-485d-b9a7-d48273b1ff", "record_id": "flaws_cloudtrail:0000316:729fab74-eb31-485d-b9a7-d48273b1ff", "row_index": 316, "timestamp": "2017-02-12T20:55:28Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729fab74-eb31-485d-b9a7-d48273b1ff", "eventTime": "2017-02-12T20:55:28Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c324284-6e19-4709-94d0-30657e977f", "record_id": "flaws_cloudtrail:0000317:3c324284-6e19-4709-94d0-30657e977f", "row_index": 317, "timestamp": "2017-02-12T20:55:28Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c324284-6e19-4709-94d0-30657e977f", "eventTime": "2017-02-12T20:55:28Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091f0cfc-967a-487d-b781-7fcfd1875c74", "record_id": "flaws_cloudtrail:0000318:091f0cfc-967a-487d-b781-7fcfd1875c74", "row_index": 318, "timestamp": "2017-02-12T20:55:28Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091f0cfc-967a-487d-b781-7fcfd1875c74", "eventTime": "2017-02-12T20:55:28Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae2ff2d-b926-4ec9-b52b-4a1391251703", "record_id": "flaws_cloudtrail:0000319:6ae2ff2d-b926-4ec9-b52b-4a1391251703", "row_index": 319, "timestamp": "2017-02-12T20:55:29Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae2ff2d-b926-4ec9-b52b-4a1391251703", "eventTime": "2017-02-12T20:55:29Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80e62d5-65f5-41e2-ac81-11a6b832650b0", "record_id": "flaws_cloudtrail:0000320:b80e62d5-65f5-41e2-ac81-11a6b832650b0", "row_index": 320, "timestamp": "2017-02-12T20:55:29Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80e62d5-65f5-41e2-ac81-11a6b832650b0", "eventTime": "2017-02-12T20:55:29Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120ee988-4903-4992-90ad-06fb479bf22d", "record_id": "flaws_cloudtrail:0000321:120ee988-4903-4992-90ad-06fb479bf22d", "row_index": 321, "timestamp": "2017-02-12T20:55:29Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120ee988-4903-4992-90ad-06fb479bf22d", "eventTime": "2017-02-12T20:55:29Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e512b8d0-7989-4fb5-9c00-b0f5d5b195346", "record_id": "flaws_cloudtrail:0000322:e512b8d0-7989-4fb5-9c00-b0f5d5b195346", "row_index": 322, "timestamp": "2017-02-12T20:55:29Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e512b8d0-7989-4fb5-9c00-b0f5d5b195346", "eventTime": "2017-02-12T20:55:29Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3f4c2a-067a-4760-8cc4-5a824201dc", "record_id": "flaws_cloudtrail:0000323:0b3f4c2a-067a-4760-8cc4-5a824201dc", "row_index": 323, "timestamp": "2017-02-12T20:55:29Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3f4c2a-067a-4760-8cc4-5a824201dc", "eventTime": "2017-02-12T20:55:29Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6feaa2a2-2c45-4513-b782-f2d1c3b79abf", "record_id": "flaws_cloudtrail:0000324:6feaa2a2-2c45-4513-b782-f2d1c3b79abf", "row_index": 324, "timestamp": "2017-02-12T20:55:29Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6feaa2a2-2c45-4513-b782-f2d1c3b79abf", "eventTime": "2017-02-12T20:55:29Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021cea9e-e9e7-455a-b924-b511d59571b6", "record_id": "flaws_cloudtrail:0000325:021cea9e-e9e7-455a-b924-b511d59571b6", "row_index": 325, "timestamp": "2017-02-12T20:55:29Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021cea9e-e9e7-455a-b924-b511d59571b6", "eventTime": "2017-02-12T20:55:29Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec32740-4443-4f71-a9d6-c6286b51dcfe", "record_id": "flaws_cloudtrail:0000326:ec32740-4443-4f71-a9d6-c6286b51dcfe", "row_index": 326, "timestamp": "2017-02-12T20:55:31Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec32740-4443-4f71-a9d6-c6286b51dcfe", "eventTime": "2017-02-12T20:55:31Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2eb06a-41a9-4d8f-af52-6fb47ed088282", "record_id": "flaws_cloudtrail:0000327:6b2eb06a-41a9-4d8f-af52-6fb47ed088282", "row_index": 327, "timestamp": "2017-02-12T20:55:33Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2eb06a-41a9-4d8f-af52-6fb47ed088282", "eventTime": "2017-02-12T20:55:33Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ecd389-5417-411a-902c-13ddea704987", "record_id": "flaws_cloudtrail:0000328:b1ecd389-5417-411a-902c-13ddea704987", "row_index": 328, "timestamp": "2017-02-12T20:55:33Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ecd389-5417-411a-902c-13ddea704987", "eventTime": "2017-02-12T20:55:33Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09a9f420-1174-4691-813a-6286594afe01", "record_id": "flaws_cloudtrail:0000329:09a9f420-1174-4691-813a-6286594afe01", "row_index": 329, "timestamp": "2017-02-12T20:55:33Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09a9f420-1174-4691-813a-6286594afe01", "eventTime": "2017-02-12T20:55:33Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e3bc8c-d5a0-4275-9128-8f1e6fbfa2e8", "record_id": "flaws_cloudtrail:0000330:24e3bc8c-d5a0-4275-9128-8f1e6fbfa2e8", "row_index": 330, "timestamp": "2017-02-12T20:55:33Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e3bc8c-d5a0-4275-9128-8f1e6fbfa2e8", "eventTime": "2017-02-12T20:55:33Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "110884a7-b4a2-4657-9046-5367cc1ae22b", "record_id": "flaws_cloudtrail:0000331:110884a7-b4a2-4657-9046-5367cc1ae22b", "row_index": 331, "timestamp": "2017-02-12T20:55:33Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "110884a7-b4a2-4657-9046-5367cc1ae22b", "eventTime": "2017-02-12T20:55:33Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5af8922-44bf-47d3-bc63-16e7a13172d", "record_id": "flaws_cloudtrail:0000332:e5af8922-44bf-47d3-bc63-16e7a13172d", "row_index": 332, "timestamp": "2017-02-12T20:55:33Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5af8922-44bf-47d3-bc63-16e7a13172d", "eventTime": "2017-02-12T20:55:33Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01f924c8-2761-4997-8886-87ef239369e75", "record_id": "flaws_cloudtrail:0000333:01f924c8-2761-4997-8886-87ef239369e75", "row_index": 333, "timestamp": "2017-02-12T20:55:46Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01f924c8-2761-4997-8886-87ef239369e75", "eventTime": "2017-02-12T20:55:46Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e98d3c-86da-47a7-b648-cd6ce618bbc4", "record_id": "flaws_cloudtrail:0000334:23e98d3c-86da-47a7-b648-cd6ce618bbc4", "row_index": 334, "timestamp": "2017-02-12T20:56:06Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e98d3c-86da-47a7-b648-cd6ce618bbc4", "eventTime": "2017-02-12T20:56:06Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7c3763-f934-4a32-b32c-2a533edb722c", "record_id": "flaws_cloudtrail:0000335:7e7c3763-f934-4a32-b32c-2a533edb722c", "row_index": 335, "timestamp": "2017-02-12T20:56:09Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7c3763-f934-4a32-b32c-2a533edb722c", "eventTime": "2017-02-12T20:56:09Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73bf68be-ac34-4ec6-b68e-a12614ffeadf", "record_id": "flaws_cloudtrail:0000336:73bf68be-ac34-4ec6-b68e-a12614ffeadf", "row_index": 336, "timestamp": "2017-02-12T20:56:09Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73bf68be-ac34-4ec6-b68e-a12614ffeadf", "eventTime": "2017-02-12T20:56:09Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a471d7cb-8a3f-4d48-8fc4-2e89612bc34e", "record_id": "flaws_cloudtrail:0000337:a471d7cb-8a3f-4d48-8fc4-2e89612bc34e", "row_index": 337, "timestamp": "2017-02-12T20:56:09Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a471d7cb-8a3f-4d48-8fc4-2e89612bc34e", "eventTime": "2017-02-12T20:56:09Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76527fb-0bdd-479c-b387-52be2b45d226", "record_id": "flaws_cloudtrail:0000338:76527fb-0bdd-479c-b387-52be2b45d226", "row_index": 338, "timestamp": "2017-02-12T20:56:09Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76527fb-0bdd-479c-b387-52be2b45d226", "eventTime": "2017-02-12T20:56:09Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072228d99-4975-4b6d-a5fc-c528a7a16073", "record_id": "flaws_cloudtrail:0000339:072228d99-4975-4b6d-a5fc-c528a7a16073", "row_index": 339, "timestamp": "2017-02-12T20:56:09Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072228d99-4975-4b6d-a5fc-c528a7a16073", "eventTime": "2017-02-12T20:56:09Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcfe7182-454a-47d3-a159-ac8dab74089a", "record_id": "flaws_cloudtrail:0000340:bcfe7182-454a-47d3-a159-ac8dab74089a", "row_index": 340, "timestamp": "2017-02-12T20:57:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 622, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcfe7182-454a-47d3-a159-ac8dab74089a", "eventTime": "2017-02-12T20:57:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d22964-bc01-41fd-8d16-8b9818dc4f8d", "record_id": "flaws_cloudtrail:0000341:8d22964-bc01-41fd-8d16-8b9818dc4f8d", "row_index": 341, "timestamp": "2017-02-12T20:57:16Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d22964-bc01-41fd-8d16-8b9818dc4f8d", "eventTime": "2017-02-12T20:57:16Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eba7e65-46b1-446a-a7bd-943a9d762cbb", "record_id": "flaws_cloudtrail:0000342:1eba7e65-46b1-446a-a7bd-943a9d762cbb", "row_index": 342, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eba7e65-46b1-446a-a7bd-943a9d762cbb", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bdfb212-19b5-44c5-baae-7dd2b539ea18", "record_id": "flaws_cloudtrail:0000343:1bdfb212-19b5-44c5-baae-7dd2b539ea18", "row_index": 343, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bdfb212-19b5-44c5-baae-7dd2b539ea18", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d82fdbf7-3fef-419f-a44f-83e705b4686a", "record_id": "flaws_cloudtrail:0000344:d82fdbf7-3fef-419f-a44f-83e705b4686a", "row_index": 344, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d82fdbf7-3fef-419f-a44f-83e705b4686a", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55114a5d-1262-4dcc-bcdc-ade878db3c4e", "record_id": "flaws_cloudtrail:0000345:55114a5d-1262-4dcc-bcdc-ade878db3c4e", "row_index": 345, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55114a5d-1262-4dcc-bcdc-ade878db3c4e", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d917254a1-38bd-4a83-8f2b-8c537e5731b5", "record_id": "flaws_cloudtrail:0000346:d917254a1-38bd-4a83-8f2b-8c537e5731b5", "row_index": 346, "timestamp": "2017-02-12T20:57:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d917254a1-38bd-4a83-8f2b-8c537e5731b5", "eventTime": "2017-02-12T20:57:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5bf28d4-5891-4f72-addc-1782a13c71e2", "record_id": "flaws_cloudtrail:0000347:d5bf28d4-5891-4f72-addc-1782a13c71e2", "row_index": 347, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5bf28d4-5891-4f72-addc-1782a13c71e2", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1c666669-d311-4b9e-a8c1-8831eb8fbb77", "record_id": "flaws_cloudtrail:0000348:f1c666669-d311-4b9e-a8c1-8831eb8fbb77", "row_index": 348, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1c666669-d311-4b9e-a8c1-8831eb8fbb77", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db241219-d439-40f5-9d21-e793c11f3ecb", "record_id": "flaws_cloudtrail:0000349:db241219-d439-40f5-9d21-e793c11f3ecb", "row_index": 349, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db241219-d439-40f5-9d21-e793c11f3ecb", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d2c3993-cd89-4b3a-aa8b-2a11775dc87b", "record_id": "flaws_cloudtrail:0000350:8d2c3993-cd89-4b3a-aa8b-2a11775dc87b", "row_index": 350, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d2c3993-cd89-4b3a-aa8b-2a11775dc87b", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4359f317-f955-4c83-b198-6b3e57afcfd0", "record_id": "flaws_cloudtrail:0000351:4359f317-f955-4c83-b198-6b3e57afcfd0", "row_index": 351, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4359f317-f955-4c83-b198-6b3e57afcfd0", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0860f29d-6d4e-418c-ba7f-d18efb5eb1e5", "record_id": "flaws_cloudtrail:0000352:0860f29d-6d4e-418c-ba7f-d18efb5eb1e5", "row_index": 352, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0860f29d-6d4e-418c-ba7f-d18efb5eb1e5", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0fce23-6868-4790-acc4-decd09c813c7", "record_id": "flaws_cloudtrail:0000353:7d0fce23-6868-4790-acc4-decd09c813c7", "row_index": 353, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0fce23-6868-4790-acc4-decd09c813c7", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df8ec129-3485-48e5-a540-5609e3e0c045", "record_id": "flaws_cloudtrail:0000354:df8ec129-3485-48e5-a540-5609e3e0c045", "row_index": 354, "timestamp": "2017-02-12T20:57:17Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df8ec129-3485-48e5-a540-5609e3e0c045", "eventTime": "2017-02-12T20:57:17Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f86889-cdea-49f1-9afe-cb3e471a1005", "record_id": "flaws_cloudtrail:0000355:52f86889-cdea-49f1-9afe-cb3e471a1005", "row_index": 355, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f86889-cdea-49f1-9afe-cb3e471a1005", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc10dd9-7e26-49c7-bacc-93113ba774d3", "record_id": "flaws_cloudtrail:0000356:2bc10dd9-7e26-49c7-bacc-93113ba774d3", "row_index": 356, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc10dd9-7e26-49c7-bacc-93113ba774d3", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd7c3e52-756f-417a-9d50-39ceb799b665", "record_id": "flaws_cloudtrail:0000357:bd7c3e52-756f-417a-9d50-39ceb799b665", "row_index": 357, "timestamp": "2017-02-12T20:57:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd7c3e52-756f-417a-9d50-39ceb799b665", "eventTime": "2017-02-12T20:57:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16a6885e-55ff-4dc2-b05e-f65448fdc9a1", "record_id": "flaws_cloudtrail:0000358:16a6885e-55ff-4dc2-b05e-f65448fdc9a1", "row_index": 358, "timestamp": "2017-02-12T20:57:21Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16a6885e-55ff-4dc2-b05e-f65448fdc9a1", "eventTime": "2017-02-12T20:57:21Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792a7422-1e9b-46f4-abe4-1fa23e3e495b", "record_id": "flaws_cloudtrail:0000359:792a7422-1e9b-46f4-abe4-1fa23e3e495b", "row_index": 359, "timestamp": "2017-02-12T20:57:44Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792a7422-1e9b-46f4-abe4-1fa23e3e495b", "eventTime": "2017-02-12T20:57:44Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485cad13-0d0f-495d-9d40-a061cf4912de", "record_id": "flaws_cloudtrail:0000360:485cad13-0d0f-495d-9d40-a061cf4912de", "row_index": 360, "timestamp": "2017-02-12T20:57:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485cad13-0d0f-495d-9d40-a061cf4912de", "eventTime": "2017-02-12T20:57:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "631bc6e8-c05b-4f4f-8ac7-b10b005a8e5e", "record_id": "flaws_cloudtrail:0000361:631bc6e8-c05b-4f4f-8ac7-b10b005a8e5e", "row_index": 361, "timestamp": "2017-02-12T20:57:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "631bc6e8-c05b-4f4f-8ac7-b10b005a8e5e", "eventTime": "2017-02-12T20:57:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69136-5055-45df-a46c-e169020a320e", "record_id": "flaws_cloudtrail:0000362:69136-5055-45df-a46c-e169020a320e", "row_index": 362, "timestamp": "2017-02-12T20:57:45Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69136-5055-45df-a46c-e169020a320e", "eventTime": "2017-02-12T20:57:45Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e7cb73-d0b7-4034-9f8b-11db9080a1eb", "record_id": "flaws_cloudtrail:0000363:87e7cb73-d0b7-4034-9f8b-11db9080a1eb", "row_index": 363, "timestamp": "2017-02-12T20:58:13Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e7cb73-d0b7-4034-9f8b-11db9080a1eb", "eventTime": "2017-02-12T20:58:13Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0734a74-4f16-4c7f-8026-a4283cbf0604", "record_id": "flaws_cloudtrail:0000364:b0734a74-4f16-4c7f-8026-a4283cbf0604", "row_index": 364, "timestamp": "2017-02-12T20:58:13Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0734a74-4f16-4c7f-8026-a4283cbf0604", "eventTime": "2017-02-12T20:58:13Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285bc6ab-26cf-4120-9108-9e6e9429d606", "record_id": "flaws_cloudtrail:0000365:285bc6ab-26cf-4120-9108-9e6e9429d606", "row_index": 365, "timestamp": "2017-02-12T20:58:13Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285bc6ab-26cf-4120-9108-9e6e9429d606", "eventTime": "2017-02-12T20:58:13Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd4584e-ebeb-47d9-8478-2eb48a880b35", "record_id": "flaws_cloudtrail:0000366:4cd4584e-ebeb-47d9-8478-2eb48a880b35", "row_index": 366, "timestamp": "2017-02-12T20:58:13Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd4584e-ebeb-47d9-8478-2eb48a880b35", "eventTime": "2017-02-12T20:58:13Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82878e9-0dfa-4724-9858-0aac8c3df54e", "record_id": "flaws_cloudtrail:0000367:82878e9-0dfa-4724-9858-0aac8c3df54e", "row_index": 367, "timestamp": "2017-02-12T20:58:13Z", "event_type": "CreatePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1608, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82878e9-0dfa-4724-9858-0aac8c3df54e", "eventTime": "2017-02-12T20:58:13Z", "eventName": "CreatePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:ListBucket\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n            ]\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetObject\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*\"\n            ]\n        }\n    ]\n}", "policyName": "Level3"}, "responseElements": {"policy": {"updateDate": "Feb 12, 2017 8:58:13 PM", "createDate": "Feb 12, 2017 8:58:13 PM", "attachmentCount": 0, "arn": "arn:aws:iam::811596193553:policy/Level3", "defaultVersionId": "v1", "path": "/", "policyId": "ANPAHI17SXDY4VPL1N1K8", "policyName": "Level3", "isAttachable": true}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ab7a9cc-35e2-46e8-8851-4c078af3da9f", "record_id": "flaws_cloudtrail:0000368:7ab7a9cc-35e2-46e8-8851-4c078af3da9f", "row_index": 368, "timestamp": "2017-02-12T20:58:13Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ab7a9cc-35e2-46e8-8851-4c078af3da9f", "eventTime": "2017-02-12T20:58:13Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b872d4-d1ad-4e75-9c99-cc353e29f3e7", "record_id": "flaws_cloudtrail:0000369:f5b872d4-d1ad-4e75-9c99-cc353e29f3e7", "row_index": 369, "timestamp": "2017-02-12T20:58:21Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b872d4-d1ad-4e75-9c99-cc353e29f3e7", "eventTime": "2017-02-12T20:58:21Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1de72ab-469f-458c-b69f-91d8070e5a12", "record_id": "flaws_cloudtrail:0000370:a1de72ab-469f-458c-b69f-91d8070e5a12", "row_index": 370, "timestamp": "2017-02-12T20:58:26Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1de72ab-469f-458c-b69f-91d8070e5a12", "eventTime": "2017-02-12T20:58:26Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"userName": "backup"}, "responseElements": {"user": {"path": "/", "arn": "arn:aws:iam::811596193553:user/backup", "userId": "AIDA9BO36HFBHKGJAO9C1", "createDate": "Feb 12, 2017 8:58:26 PM", "userName": "backup"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d715857fa-dfff-43f7-a280-4ccf8897f375", "record_id": "flaws_cloudtrail:0000371:d715857fa-dfff-43f7-a280-4ccf8897f375", "row_index": 371, "timestamp": "2017-02-12T20:58:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d715857fa-dfff-43f7-a280-4ccf8897f375", "eventTime": "2017-02-12T20:58:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93311a2a-e329-47f3-aa2f-48f581421509", "record_id": "flaws_cloudtrail:0000372:93311a2a-e329-47f3-aa2f-48f581421509", "row_index": 372, "timestamp": "2017-02-12T20:58:27Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93311a2a-e329-47f3-aa2f-48f581421509", "eventTime": "2017-02-12T20:58:27Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc0d436-dd49-4279-a005-6f13ea9db5b0", "record_id": "flaws_cloudtrail:0000373:1fc0d436-dd49-4279-a005-6f13ea9db5b0", "row_index": 373, "timestamp": "2017-02-12T20:58:27Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc0d436-dd49-4279-a005-6f13ea9db5b0", "eventTime": "2017-02-12T20:58:27Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"userName": "backup", "policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7208d05-ff3f-425c-9cb7-a8d8d2fcdca8", "record_id": "flaws_cloudtrail:0000374:f7208d05-ff3f-425c-9cb7-a8d8d2fcdca8", "row_index": 374, "timestamp": "2017-02-12T20:58:27Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7208d05-ff3f-425c-9cb7-a8d8d2fcdca8", "eventTime": "2017-02-12T20:58:27Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000, "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a49e75-1f3d-4cf1-aff6-7bd495568bf7", "record_id": "flaws_cloudtrail:0000375:99a49e75-1f3d-4cf1-aff6-7bd495568bf7", "row_index": 375, "timestamp": "2017-02-12T20:58:27Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a49e75-1f3d-4cf1-aff6-7bd495568bf7", "eventTime": "2017-02-12T20:58:27Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c12429-771f-43c3-bf74-39a58c645371", "record_id": "flaws_cloudtrail:0000376:c12429-771f-43c3-bf74-39a58c645371", "row_index": 376, "timestamp": "2017-02-12T20:58:27Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c12429-771f-43c3-bf74-39a58c645371", "eventTime": "2017-02-12T20:58:27Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"userName": "backup"}, "responseElements": {"accessKey": {"accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "status": "Active", "userName": "backup", "createDate": "Feb 12, 2017 8:58:27 PM"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4573e872-62ed-4ab4-b6d3-5748ecd5720f", "record_id": "flaws_cloudtrail:0000377:4573e872-62ed-4ab4-b6d3-5748ecd5720f", "row_index": 377, "timestamp": "2017-02-12T21:05:13Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4573e872-62ed-4ab4-b6d3-5748ecd5720f", "eventTime": "2017-02-12T21:05:13Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f11f5369-4ffe-434f-bf87-319df9eba6f6", "record_id": "flaws_cloudtrail:0000378:f11f5369-4ffe-434f-bf87-319df9eba6f6", "row_index": 378, "timestamp": "2017-02-12T21:06:37Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f11f5369-4ffe-434f-bf87-319df9eba6f6", "eventTime": "2017-02-12T21:06:37Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fec53213-1957-4f7f-be9a-50194587af14", "record_id": "flaws_cloudtrail:0000379:fec53213-1957-4f7f-be9a-50194587af14", "row_index": 379, "timestamp": "2017-02-12T21:07:37Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fec53213-1957-4f7f-be9a-50194587af14", "eventTime": "2017-02-12T21:07:37Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786efff2-7c1d-467f-bd88-26d9c357e753", "record_id": "flaws_cloudtrail:0000380:786efff2-7c1d-467f-bd88-26d9c357e753", "row_index": 380, "timestamp": "2017-02-12T21:10:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 545, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786efff2-7c1d-467f-bd88-26d9c357e753", "eventTime": "2017-02-12T21:10:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dafc2f8-066b-4ebb-8d1c-fccd80a1f66e", "record_id": "flaws_cloudtrail:0000381:0dafc2f8-066b-4ebb-8d1c-fccd80a1f66e", "row_index": 381, "timestamp": "2017-02-12T21:15:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dafc2f8-066b-4ebb-8d1c-fccd80a1f66e", "eventTime": "2017-02-12T21:15:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f5a993-c85f-474d-afd8-403159a8e1a", "record_id": "flaws_cloudtrail:0000382:d5f5a993-c85f-474d-afd8-403159a8e1a", "row_index": 382, "timestamp": "2017-02-12T21:17:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f5a993-c85f-474d-afd8-403159a8e1a", "eventTime": "2017-02-12T21:17:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a764f6f-089b-4002-a3c9-93fdd4b35ce3", "record_id": "flaws_cloudtrail:0000383:3a764f6f-089b-4002-a3c9-93fdd4b35ce3", "row_index": 383, "timestamp": "2017-02-12T21:17:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/backup-elevated-70"], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a764f6f-089b-4002-a3c9-93fdd4b35ce3", "eventTime": "2017-02-12T21:17:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/backup-elevated-70", "roleSessionName": "backup-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/backup-elevated-70"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6594bdbf-d423-4c6c-92ff-fcbbe4175f69", "record_id": "flaws_cloudtrail:0000384:6594bdbf-d423-4c6c-92ff-fcbbe4175f69", "row_index": 384, "timestamp": "2017-02-12T21:18:30Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6594bdbf-d423-4c6c-92ff-fcbbe4175f69", "eventTime": "2017-02-12T21:18:30Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87cc70e5-61e2-4342-afcb-ef3dbe5d50b4", "record_id": "flaws_cloudtrail:0000385:87cc70e5-61e2-4342-afcb-ef3dbe5d50b4", "row_index": 385, "timestamp": "2017-02-12T21:18:32Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87cc70e5-61e2-4342-afcb-ef3dbe5d50b4", "eventTime": "2017-02-12T21:18:32Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b32aec1-b5f3-4b91-b2ce-27dd9597e455", "record_id": "flaws_cloudtrail:0000386:2b32aec1-b5f3-4b91-b2ce-27dd9597e455", "row_index": 386, "timestamp": "2017-02-12T21:18:32Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b32aec1-b5f3-4b91-b2ce-27dd9597e455", "eventTime": "2017-02-12T21:18:32Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8221fcd-21f1-41de-af34-5790cb844ee1", "record_id": "flaws_cloudtrail:0000387:a8221fcd-21f1-41de-af34-5790cb844ee1", "row_index": 387, "timestamp": "2017-02-12T21:18:34Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8221fcd-21f1-41de-af34-5790cb844ee1", "eventTime": "2017-02-12T21:18:34Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53c96ac3-d4a6-4146-813a-a475c9789232", "record_id": "flaws_cloudtrail:0000388:53c96ac3-d4a6-4146-813a-a475c9789232", "row_index": 388, "timestamp": "2017-02-12T21:18:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53c96ac3-d4a6-4146-813a-a475c9789232", "eventTime": "2017-02-12T21:18:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6596b519-589c-434a-98e0-28e0a695d872", "record_id": "flaws_cloudtrail:0000389:6596b519-589c-434a-98e0-28e0a695d872", "row_index": 389, "timestamp": "2017-02-12T21:18:34Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6596b519-589c-434a-98e0-28e0a695d872", "eventTime": "2017-02-12T21:18:34Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa6d1cbd-ac6b-4885-be7d-64ffc9b527ef", "record_id": "flaws_cloudtrail:0000390:fa6d1cbd-ac6b-4885-be7d-64ffc9b527ef", "row_index": 390, "timestamp": "2017-02-12T21:18:34Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa6d1cbd-ac6b-4885-be7d-64ffc9b527ef", "eventTime": "2017-02-12T21:18:34Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"userName": "backup", "maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb48280-e913-4d65-9f11-78e96647d", "record_id": "flaws_cloudtrail:0000391:fb48280-e913-4d65-9f11-78e96647d", "row_index": 391, "timestamp": "2017-02-12T21:18:34Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb48280-e913-4d65-9f11-78e96647d", "eventTime": "2017-02-12T21:18:34Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d19cbb2-7bdb-4dd5-b22a-3bb9905af050", "record_id": "flaws_cloudtrail:0000392:2d19cbb2-7bdb-4dd5-b22a-3bb9905af050", "row_index": 392, "timestamp": "2017-02-12T21:18:34Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d19cbb2-7bdb-4dd5-b22a-3bb9905af050", "eventTime": "2017-02-12T21:18:34Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31ff8a7a-8f60-4152-8acd-bca71327d572", "record_id": "flaws_cloudtrail:0000393:31ff8a7a-8f60-4152-8acd-bca71327d572", "row_index": 393, "timestamp": "2017-02-12T21:18:58Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1787, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31ff8a7a-8f60-4152-8acd-bca71327d572", "eventTime": "2017-02-12T21:18:58Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:ListBucket\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n            ]\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetObject\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*\"\n            ]\n        }\n    ]\n}"}, "responseElements": {"policyVersion": {"isDefaultVersion": true, "createDate": "Feb 12, 2017 9:18:58 PM", "versionId": "v2"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d211213-c9cb-4c40-add0-83ee28e7ca0e", "record_id": "flaws_cloudtrail:0000394:d211213-c9cb-4c40-add0-83ee28e7ca0e", "row_index": 394, "timestamp": "2017-02-12T21:19:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d211213-c9cb-4c40-add0-83ee28e7ca0e", "eventTime": "2017-02-12T21:19:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "509e252d-ff49-4d3e-9474-41808385b989", "record_id": "flaws_cloudtrail:0000395:509e252d-ff49-4d3e-9474-41808385b989", "row_index": 395, "timestamp": "2017-02-12T21:19:09Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAO53HCJY5LDVG8SJV", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "171.78.195.34", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-5565"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "509e252d-ff49-4d3e-9474-41808385b989", "eventTime": "2017-02-12T21:19:09Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "171.78.195.34", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAO53HCJY5LDVG8SJV", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-5565", "key": "reports/651.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5565"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f60a8f-b52e-4ef2-a3fd-018d756a8ecc", "record_id": "flaws_cloudtrail:0000396:52f60a8f-b52e-4ef2-a3fd-018d756a8ecc", "row_index": 396, "timestamp": "2017-02-12T21:19:13Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1729, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f60a8f-b52e-4ef2-a3fd-018d756a8ecc", "eventTime": "2017-02-12T21:19:13Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::*\"\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:ListBucket\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n            ]\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetObject\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*\"\n            ]\n        }\n    ]\n}"}, "responseElements": {"policyVersion": {"isDefaultVersion": true, "createDate": "Feb 12, 2017 9:19:13 PM", "versionId": "v3"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "134e8157-19c8-489d-9fd1-249cb88d4ade", "record_id": "flaws_cloudtrail:0000397:134e8157-19c8-489d-9fd1-249cb88d4ade", "row_index": 397, "timestamp": "2017-02-12T21:19:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "134e8157-19c8-489d-9fd1-249cb88d4ade", "eventTime": "2017-02-12T21:19:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d85061-79dd-4a80-b49a-8a0c25e33242", "record_id": "flaws_cloudtrail:0000398:1d85061-79dd-4a80-b49a-8a0c25e33242", "row_index": 398, "timestamp": "2017-02-12T21:20:40Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d85061-79dd-4a80-b49a-8a0c25e33242", "eventTime": "2017-02-12T21:20:40Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f1ece93-eaff-4682-8b86-18d06617b1", "record_id": "flaws_cloudtrail:0000399:6f1ece93-eaff-4682-8b86-18d06617b1", "row_index": 399, "timestamp": "2017-02-12T21:21:01Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1785, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f1ece93-eaff-4682-8b86-18d06617b1", "eventTime": "2017-02-12T21:21:01Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:ListBucket\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n            ]\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetObject\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*\"\n            ]\n        }\n    ]\n}"}, "responseElements": {"policyVersion": {"isDefaultVersion": true, "createDate": "Feb 12, 2017 9:21:01 PM", "versionId": "v4"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941d7259-4d1b-46e3-bc69-cd34519b68", "record_id": "flaws_cloudtrail:0000400:941d7259-4d1b-46e3-bc69-cd34519b68", "row_index": 400, "timestamp": "2017-02-12T21:21:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941d7259-4d1b-46e3-bc69-cd34519b68", "eventTime": "2017-02-12T21:21:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7acd714-74f9-49a8-8b7b-511e0d48892e", "record_id": "flaws_cloudtrail:0000401:f7acd714-74f9-49a8-8b7b-511e0d48892e", "row_index": 401, "timestamp": "2017-02-12T21:21:06Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7acd714-74f9-49a8-8b7b-511e0d48892e", "eventTime": "2017-02-12T21:21:06Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7e5ea14-9325-4184-a2ff-3a4d74c0066a", "record_id": "flaws_cloudtrail:0000402:d7e5ea14-9325-4184-a2ff-3a4d74c0066a", "row_index": 402, "timestamp": "2017-02-12T21:29:07Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1729, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7e5ea14-9325-4184-a2ff-3a4d74c0066a", "eventTime": "2017-02-12T21:29:07Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::*\"\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:ListBucket\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud\"\n            ]\n        },\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetObject\"\n            ],\n            \"Resource\": [\n                \"arn:aws:s3:::level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*\"\n            ]\n        }\n    ]\n}"}, "responseElements": {"policyVersion": {"isDefaultVersion": true, "createDate": "Feb 12, 2017 9:29:07 PM", "versionId": "v5"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "387a2642-3726-405f-b91f-91857c8b822e", "record_id": "flaws_cloudtrail:0000403:387a2642-3726-405f-b91f-91857c8b822e", "row_index": 403, "timestamp": "2017-02-12T21:29:54Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "387a2642-3726-405f-b91f-91857c8b822e", "eventTime": "2017-02-12T21:29:54Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ae9c95a-8afa-476c-b5a7-ad58c2adb09b", "record_id": "flaws_cloudtrail:0000404:0ae9c95a-8afa-476c-b5a7-ad58c2adb09b", "row_index": 404, "timestamp": "2017-02-12T21:29:58Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ae9c95a-8afa-476c-b5a7-ad58c2adb09b", "eventTime": "2017-02-12T21:29:58Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091642b4-b09b-462a-989c-9d9dcaeeccb8", "record_id": "flaws_cloudtrail:0000405:091642b4-b09b-462a-989c-9d9dcaeeccb8", "row_index": 405, "timestamp": "2017-02-12T21:30:12Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1251, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091642b4-b09b-462a-989c-9d9dcaeeccb8", "eventTime": "2017-02-12T21:30:12Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "LimitExceededException", "errorMessage": "A managed policy can have up to 5 versions. Before you create a new version, you must delete an existing version.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::*\"\n        }\n    ]\n}"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de25789-2fd3-4a3d-b429-c2a44d035eb6", "record_id": "flaws_cloudtrail:0000406:6de25789-2fd3-4a3d-b429-c2a44d035eb6", "row_index": 406, "timestamp": "2017-02-12T21:30:23Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de25789-2fd3-4a3d-b429-c2a44d035eb6", "eventTime": "2017-02-12T21:30:23Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615235ef-b93d-4561-8bd1-fee816666", "record_id": "flaws_cloudtrail:0000407:615235ef-b93d-4561-8bd1-fee816666", "row_index": 407, "timestamp": "2017-02-12T21:30:28Z", "event_type": "DeletePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615235ef-b93d-4561-8bd1-fee816666", "eventTime": "2017-02-12T21:30:28Z", "eventName": "DeletePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b9bf48a-1442-4125-b488-c2bc76f1b5ce", "record_id": "flaws_cloudtrail:0000408:9b9bf48a-1442-4125-b488-c2bc76f1b5ce", "row_index": 408, "timestamp": "2017-02-12T21:30:28Z", "event_type": "DeletePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b9bf48a-1442-4125-b488-c2bc76f1b5ce", "eventTime": "2017-02-12T21:30:28Z", "eventName": "DeletePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e15b71df-04ca-4e83-8877-7229abab5375", "record_id": "flaws_cloudtrail:0000409:e15b71df-04ca-4e83-8877-7229abab5375", "row_index": 409, "timestamp": "2017-02-12T21:30:28Z", "event_type": "DeletePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e15b71df-04ca-4e83-8877-7229abab5375", "eventTime": "2017-02-12T21:30:28Z", "eventName": "DeletePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab2551c-1631-4ac9-9ec9-9f8a9e8a1f76", "record_id": "flaws_cloudtrail:0000410:dab2551c-1631-4ac9-9ec9-9f8a9e8a1f76", "row_index": 410, "timestamp": "2017-02-12T21:30:28Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab2551c-1631-4ac9-9ec9-9f8a9e8a1f76", "eventTime": "2017-02-12T21:30:28Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9e89ec-3bb4-497b-833a-c1b39f0be740", "record_id": "flaws_cloudtrail:0000411:ce9e89ec-3bb4-497b-833a-c1b39f0be740", "row_index": 411, "timestamp": "2017-02-12T21:30:28Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9e89ec-3bb4-497b-833a-c1b39f0be740", "eventTime": "2017-02-12T21:30:28Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdb7bd26-c939-4835-9ac1-95a75f79b20f", "record_id": "flaws_cloudtrail:0000412:fdb7bd26-c939-4835-9ac1-95a75f79b20f", "row_index": 412, "timestamp": "2017-02-12T21:30:28Z", "event_type": "DeletePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdb7bd26-c939-4835-9ac1-95a75f79b20f", "eventTime": "2017-02-12T21:30:28Z", "eventName": "DeletePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ddbf0ab-4528-4ff7-8037-2c3cca792d48", "record_id": "flaws_cloudtrail:0000413:0ddbf0ab-4528-4ff7-8037-2c3cca792d48", "row_index": 413, "timestamp": "2017-02-12T21:30:32Z", "event_type": "CreatePolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1179, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ddbf0ab-4528-4ff7-8037-2c3cca792d48", "eventTime": "2017-02-12T21:30:32Z", "eventName": "CreatePolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"setAsDefault": true, "policyArn": "arn:aws:iam::811596193553:policy/Level3", "policyDocument": "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"s3:GetBucketLocation\",\n                \"s3:ListAllMyBuckets\"\n            ],\n            \"Resource\": \"arn:aws:s3:::*\"\n        }\n    ]\n}"}, "responseElements": {"policyVersion": {"isDefaultVersion": true, "createDate": "Feb 12, 2017 9:30:32 PM", "versionId": "v6"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfd366db-7ee2-4d69-8292-230fff55f56c", "record_id": "flaws_cloudtrail:0000414:bfd366db-7ee2-4d69-8292-230fff55f56c", "row_index": 414, "timestamp": "2017-02-12T21:30:32Z", "event_type": "ListPolicyVersions", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfd366db-7ee2-4d69-8292-230fff55f56c", "eventTime": "2017-02-12T21:30:32Z", "eventName": "ListPolicyVersions", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bc3aa1-ad07-4f6c-ad06-bd5a57fc7d7c", "record_id": "flaws_cloudtrail:0000415:03bc3aa1-ad07-4f6c-ad06-bd5a57fc7d7c", "row_index": 415, "timestamp": "2017-02-12T21:30:44Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bc3aa1-ad07-4f6c-ad06-bd5a57fc7d7c", "eventTime": "2017-02-12T21:30:44Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c661a151-2920-4e65-b0dc-32dc8e09a3b5", "record_id": "flaws_cloudtrail:0000416:c661a151-2920-4e65-b0dc-32dc8e09a3b5", "row_index": 416, "timestamp": "2017-02-12T21:30:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c661a151-2920-4e65-b0dc-32dc8e09a3b5", "eventTime": "2017-02-12T21:30:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc156401-274b-47a5-ba41-5defeee4c9b1", "record_id": "flaws_cloudtrail:0000417:0dc156401-274b-47a5-ba41-5defeee4c9b1", "row_index": 417, "timestamp": "2017-02-12T21:30:56Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc156401-274b-47a5-ba41-5defeee4c9b1", "eventTime": "2017-02-12T21:30:56Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level3-b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c61a61-95b0-4a15-8500-a5f232923d881", "record_id": "flaws_cloudtrail:0000418:67c61a61-95b0-4a15-8500-a5f232923d881", "row_index": 418, "timestamp": "2017-02-12T21:31:06Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c61a61-95b0-4a15-8500-a5f232923d881", "eventTime": "2017-02-12T21:31:06Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bab981-2008-4d46-9bc6-85f2043f011c", "record_id": "flaws_cloudtrail:0000419:53bab981-2008-4d46-9bc6-85f2043f011c", "row_index": 419, "timestamp": "2017-02-12T21:32:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bab981-2008-4d46-9bc6-85f2043f011c", "eventTime": "2017-02-12T21:32:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e3896d-d15c-4f08-ac66-a9cf1892f296", "record_id": "flaws_cloudtrail:0000420:a5e3896d-d15c-4f08-ac66-a9cf1892f296", "row_index": 420, "timestamp": "2017-02-12T21:37:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e3896d-d15c-4f08-ac66-a9cf1892f296", "eventTime": "2017-02-12T21:37:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d964942-c2e2-4e4f-aafc-4013285fb6d0", "record_id": "flaws_cloudtrail:0000421:d964942-c2e2-4e4f-aafc-4013285fb6d0", "row_index": 421, "timestamp": "2017-02-12T21:37:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d964942-c2e2-4e4f-aafc-4013285fb6d0", "eventTime": "2017-02-12T21:37:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b92f285-e56e-4420-89ca-053d0e91d876", "record_id": "flaws_cloudtrail:0000422:0b92f285-e56e-4420-89ca-053d0e91d876", "row_index": 422, "timestamp": "2017-02-12T21:37:59Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b92f285-e56e-4420-89ca-053d0e91d876", "eventTime": "2017-02-12T21:37:59Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a66a605-9dfe-4a57-87a8-70db0064c30a", "record_id": "flaws_cloudtrail:0000423:3a66a605-9dfe-4a57-87a8-70db0064c30a", "row_index": 423, "timestamp": "2017-02-12T21:38:01Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a66a605-9dfe-4a57-87a8-70db0064c30a", "eventTime": "2017-02-12T21:38:01Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c7712e5-1cb3-4ef8-b707-319f21986ec8", "record_id": "flaws_cloudtrail:0000424:5c7712e5-1cb3-4ef8-b707-319f21986ec8", "row_index": 424, "timestamp": "2017-02-12T21:38:01Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c7712e5-1cb3-4ef8-b707-319f21986ec8", "eventTime": "2017-02-12T21:38:01Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6d174e-23ba-4c8d-8cdc-73a6b534c22f", "record_id": "flaws_cloudtrail:0000425:3a6d174e-23ba-4c8d-8cdc-73a6b534c22f", "row_index": 425, "timestamp": "2017-02-12T21:38:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6d174e-23ba-4c8d-8cdc-73a6b534c22f", "eventTime": "2017-02-12T21:38:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c642c82-d5fe-407f-b70a-9462775579fa", "record_id": "flaws_cloudtrail:0000426:2c642c82-d5fe-407f-b70a-9462775579fa", "row_index": 426, "timestamp": "2017-02-12T21:38:01Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c642c82-d5fe-407f-b70a-9462775579fa", "eventTime": "2017-02-12T21:38:01Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8dd2a48-29b3-4a26-a786-5a1fb60e7f4e", "record_id": "flaws_cloudtrail:0000427:f8dd2a48-29b3-4a26-a786-5a1fb60e7f4e", "row_index": 427, "timestamp": "2017-02-12T21:38:01Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8dd2a48-29b3-4a26-a786-5a1fb60e7f4e", "eventTime": "2017-02-12T21:38:01Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6f5ecc7-e3f7-4a95-bb48-5e467866ba7e7", "record_id": "flaws_cloudtrail:0000428:e6f5ecc7-e3f7-4a95-bb48-5e467866ba7e7", "row_index": 428, "timestamp": "2017-02-12T21:38:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6f5ecc7-e3f7-4a95-bb48-5e467866ba7e7", "eventTime": "2017-02-12T21:38:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db8f3744-c464-4a95-b0d8-183c3fd2be3c", "record_id": "flaws_cloudtrail:0000429:db8f3744-c464-4a95-b0d8-183c3fd2be3c", "row_index": 429, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db8f3744-c464-4a95-b0d8-183c3fd2be3c", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dfcf247-7fcf-455f-8aa6-93deff046909", "record_id": "flaws_cloudtrail:0000430:2dfcf247-7fcf-455f-8aa6-93deff046909", "row_index": 430, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dfcf247-7fcf-455f-8aa6-93deff046909", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd10769-2db4-4e5e-8513-54e7c47aa5d6", "record_id": "flaws_cloudtrail:0000431:bcd10769-2db4-4e5e-8513-54e7c47aa5d6", "row_index": 431, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd10769-2db4-4e5e-8513-54e7c47aa5d6", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7192a38-d522-46ad-937b-130405a1e7a7", "record_id": "flaws_cloudtrail:0000432:d7192a38-d522-46ad-937b-130405a1e7a7", "row_index": 432, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7192a38-d522-46ad-937b-130405a1e7a7", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e768ec12-d268-45d3-b162-4a5e15426b", "record_id": "flaws_cloudtrail:0000433:e768ec12-d268-45d3-b162-4a5e15426b", "row_index": 433, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e768ec12-d268-45d3-b162-4a5e15426b", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5d9cef6-5675-439f-8601-ad52b2ec2558", "record_id": "flaws_cloudtrail:0000434:a5d9cef6-5675-439f-8601-ad52b2ec2558", "row_index": 434, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5d9cef6-5675-439f-8601-ad52b2ec2558", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32785c5-d6c7-42cc-b7fc-759dd625113a", "record_id": "flaws_cloudtrail:0000435:a32785c5-d6c7-42cc-b7fc-759dd625113a", "row_index": 435, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32785c5-d6c7-42cc-b7fc-759dd625113a", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d0f31f6-ea42-4505-b8c6-93bac8ffa76d", "record_id": "flaws_cloudtrail:0000436:9d0f31f6-ea42-4505-b8c6-93bac8ffa76d", "row_index": 436, "timestamp": "2017-02-12T21:38:02Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d0f31f6-ea42-4505-b8c6-93bac8ffa76d", "eventTime": "2017-02-12T21:38:02Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0361a6b8-22f4-4332-abc5-14910fd89a1", "record_id": "flaws_cloudtrail:0000437:0361a6b8-22f4-4332-abc5-14910fd89a1", "row_index": 437, "timestamp": "2017-02-12T21:38:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0361a6b8-22f4-4332-abc5-14910fd89a1", "eventTime": "2017-02-12T21:38:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413299e8-e2f9-4924-aab4-06dbae64ee1a", "record_id": "flaws_cloudtrail:0000438:413299e8-e2f9-4924-aab4-06dbae64ee1a", "row_index": 438, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413299e8-e2f9-4924-aab4-06dbae64ee1a", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9d702e-d98d-4af6-9308-8bb4f438e4b0", "record_id": "flaws_cloudtrail:0000439:8a9d702e-d98d-4af6-9308-8bb4f438e4b0", "row_index": 439, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9d702e-d98d-4af6-9308-8bb4f438e4b0", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdab0954-cea5-42fe-ad68-d059edbbcd00", "record_id": "flaws_cloudtrail:0000440:cdab0954-cea5-42fe-ad68-d059edbbcd00", "row_index": 440, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdab0954-cea5-42fe-ad68-d059edbbcd00", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e569e3d-d28a-4c20-850d-eab580155b32", "record_id": "flaws_cloudtrail:0000441:9e569e3d-d28a-4c20-850d-eab580155b32", "row_index": 441, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e569e3d-d28a-4c20-850d-eab580155b32", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328818-ed7f-48d8-8531-f51519b7c59", "record_id": "flaws_cloudtrail:0000442:328818-ed7f-48d8-8531-f51519b7c59", "row_index": 442, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328818-ed7f-48d8-8531-f51519b7c59", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc9d3aac-7e31-44a2-8de5-38565aed7259", "record_id": "flaws_cloudtrail:0000443:bc9d3aac-7e31-44a2-8de5-38565aed7259", "row_index": 443, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc9d3aac-7e31-44a2-8de5-38565aed7259", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8906d054-186b-420a-ab12-583c9ab78393", "record_id": "flaws_cloudtrail:0000444:8906d054-186b-420a-ab12-583c9ab78393", "row_index": 444, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8906d054-186b-420a-ab12-583c9ab78393", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43732ff-a434-4da2-ac0c-6675ae4331ae", "record_id": "flaws_cloudtrail:0000445:b43732ff-a434-4da2-ac0c-6675ae4331ae", "row_index": 445, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43732ff-a434-4da2-ac0c-6675ae4331ae", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fd5612-99b2-4e5f-b466-9ba592180", "record_id": "flaws_cloudtrail:0000446:90fd5612-99b2-4e5f-b466-9ba592180", "row_index": 446, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fd5612-99b2-4e5f-b466-9ba592180", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b69c0db5-4b7d-4fa0-9191-1d800275d", "record_id": "flaws_cloudtrail:0000447:b69c0db5-4b7d-4fa0-9191-1d800275d", "row_index": 447, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b69c0db5-4b7d-4fa0-9191-1d800275d", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be503973-6b67-4f30-aedc-2d250c4b8ffd", "record_id": "flaws_cloudtrail:0000448:be503973-6b67-4f30-aedc-2d250c4b8ffd", "row_index": 448, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be503973-6b67-4f30-aedc-2d250c4b8ffd", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206cf038-f305-4018-b4dd-36d6bdf0376a", "record_id": "flaws_cloudtrail:0000449:206cf038-f305-4018-b4dd-36d6bdf0376a", "row_index": 449, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206cf038-f305-4018-b4dd-36d6bdf0376a", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97fb4e7f-9001-4e42-80b8-5d6734feae4a", "record_id": "flaws_cloudtrail:0000450:97fb4e7f-9001-4e42-80b8-5d6734feae4a", "row_index": 450, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97fb4e7f-9001-4e42-80b8-5d6734feae4a", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0e7f393-dd2c-4f43-843f-75f4dae23569", "record_id": "flaws_cloudtrail:0000451:c0e7f393-dd2c-4f43-843f-75f4dae23569", "row_index": 451, "timestamp": "2017-02-12T21:38:11Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0e7f393-dd2c-4f43-843f-75f4dae23569", "eventTime": "2017-02-12T21:38:11Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eda4caa1-48f4-4d42-a3fb-9622499e4e94", "record_id": "flaws_cloudtrail:0000452:eda4caa1-48f4-4d42-a3fb-9622499e4e94", "row_index": 452, "timestamp": "2017-02-12T21:38:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eda4caa1-48f4-4d42-a3fb-9622499e4e94", "eventTime": "2017-02-12T21:38:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcb40c8b-cf13-4711-a24c-185252cdcf0f", "record_id": "flaws_cloudtrail:0000453:fcb40c8b-cf13-4711-a24c-185252cdcf0f", "row_index": 453, "timestamp": "2017-02-12T21:38:12Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcb40c8b-cf13-4711-a24c-185252cdcf0f", "eventTime": "2017-02-12T21:38:12Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51b6020-3cf6-4946-b46e-dde9d47e0a5e", "record_id": "flaws_cloudtrail:0000454:a51b6020-3cf6-4946-b46e-dde9d47e0a5e", "row_index": 454, "timestamp": "2017-02-12T21:38:12Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51b6020-3cf6-4946-b46e-dde9d47e0a5e", "eventTime": "2017-02-12T21:38:12Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b6c9e22-55ed-4927-b04c-4a8ddb0dd3a6", "record_id": "flaws_cloudtrail:0000455:6b6c9e22-55ed-4927-b04c-4a8ddb0dd3a6", "row_index": 455, "timestamp": "2017-02-12T21:38:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b6c9e22-55ed-4927-b04c-4a8ddb0dd3a6", "eventTime": "2017-02-12T21:38:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e63dbe-50f4-41ed-9818-20da1d02039d", "record_id": "flaws_cloudtrail:0000456:a2e63dbe-50f4-41ed-9818-20da1d02039d", "row_index": 456, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e63dbe-50f4-41ed-9818-20da1d02039d", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b316c954-af0a-4292-b01b-e37df2ce7997", "record_id": "flaws_cloudtrail:0000457:b316c954-af0a-4292-b01b-e37df2ce7997", "row_index": 457, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b316c954-af0a-4292-b01b-e37df2ce7997", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1829a386-1aef-4e02-a2d5-eb01523b693", "record_id": "flaws_cloudtrail:0000458:1829a386-1aef-4e02-a2d5-eb01523b693", "row_index": 458, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1829a386-1aef-4e02-a2d5-eb01523b693", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d7648c-29b5-48cf-afb7-c05bfa7b46aa", "record_id": "flaws_cloudtrail:0000459:16d7648c-29b5-48cf-afb7-c05bfa7b46aa", "row_index": 459, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d7648c-29b5-48cf-afb7-c05bfa7b46aa", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef9ce5c9-a7de-48a6-8613-f207ff57e6cf", "record_id": "flaws_cloudtrail:0000460:ef9ce5c9-a7de-48a6-8613-f207ff57e6cf", "row_index": 460, "timestamp": "2017-02-12T21:38:15Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef9ce5c9-a7de-48a6-8613-f207ff57e6cf", "eventTime": "2017-02-12T21:38:15Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88943-fe62-49f6-b03c-149457a42280", "record_id": "flaws_cloudtrail:0000461:b88943-fe62-49f6-b03c-149457a42280", "row_index": 461, "timestamp": "2017-02-12T21:38:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88943-fe62-49f6-b03c-149457a42280", "eventTime": "2017-02-12T21:38:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb6f5ff-3620-46dd-a496-f84cdd922a83", "record_id": "flaws_cloudtrail:0000462:dcb6f5ff-3620-46dd-a496-f84cdd922a83", "row_index": 462, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb6f5ff-3620-46dd-a496-f84cdd922a83", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63af2fda-fe67-469f-a309-3ddde7a74c5c", "record_id": "flaws_cloudtrail:0000463:63af2fda-fe67-469f-a309-3ddde7a74c5c", "row_index": 463, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63af2fda-fe67-469f-a309-3ddde7a74c5c", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a07ee97b-f0d8-433a-84ca-0661687740a8", "record_id": "flaws_cloudtrail:0000464:a07ee97b-f0d8-433a-84ca-0661687740a8", "row_index": 464, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a07ee97b-f0d8-433a-84ca-0661687740a8", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ffcb58-c634-4678-9448-428694dc1d9", "record_id": "flaws_cloudtrail:0000465:b1ffcb58-c634-4678-9448-428694dc1d9", "row_index": 465, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ffcb58-c634-4678-9448-428694dc1d9", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4bfd152-f708-4644-8777-b3d62cb21daa", "record_id": "flaws_cloudtrail:0000466:f4bfd152-f708-4644-8777-b3d62cb21daa", "row_index": 466, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4bfd152-f708-4644-8777-b3d62cb21daa", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81ae7e1b-f3ba-448a-89a3-631a69ea52eb", "record_id": "flaws_cloudtrail:0000467:81ae7e1b-f3ba-448a-89a3-631a69ea52eb", "row_index": 467, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA7XJI569JM5X1TOWR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81ae7e1b-f3ba-448a-89a3-631a69ea52eb", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA7XJI569JM5X1TOWR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f6a904-3ae9-432a-bd5e-85e5f8d680d5", "record_id": "flaws_cloudtrail:0000468:d7f6a904-3ae9-432a-bd5e-85e5f8d680d5", "row_index": 468, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f6a904-3ae9-432a-bd5e-85e5f8d680d5", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bddaecd5-30c1-41d8-a994-2cfab3520e4d", "record_id": "flaws_cloudtrail:0000469:bddaecd5-30c1-41d8-a994-2cfab3520e4d", "row_index": 469, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bddaecd5-30c1-41d8-a994-2cfab3520e4d", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed194583-7bde-4585-b808-5b6e25d065d2", "record_id": "flaws_cloudtrail:0000470:ed194583-7bde-4585-b808-5b6e25d065d2", "row_index": 470, "timestamp": "2017-02-12T21:38:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed194583-7bde-4585-b808-5b6e25d065d2", "eventTime": "2017-02-12T21:38:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea6b3f8-c0fc-4572-9bc9-7a863908c", "record_id": "flaws_cloudtrail:0000471:cea6b3f8-c0fc-4572-9bc9-7a863908c", "row_index": 471, "timestamp": "2017-02-12T21:38:25Z", "event_type": "PutBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea6b3f8-c0fc-4572-9bc9-7a863908c", "eventTime": "2017-02-12T21:38:25Z", "eventName": "PutBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "AccessControlPolicy": {"AccessControlList": {"Grant": [{"Grantee": {"__truncated_type": "dict"}, "Permission": "READ"}, {"Grantee": {"__truncated_type": "dict"}, "Permission": "WRITE"}, {"Grantee": {"__truncated_type": "dict"}, "Permission": "READ_ACP"}, {"Grantee": {"__truncated_type": "dict"}, "Permission": "WRITE_ACP"}, {"Grantee": {"__truncated_type": "dict"}, "Permission": "READ"}]}, "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/", "Owner": {"DisplayName": "0xdabbad00", "ID": "7d79b9616666995a08fc65840d243ee59b2db2e7ae658207c69aa2ae138f6e22"}}, "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e45abdf8-8fc3-4a88-b43b-b97840d8520b", "record_id": "flaws_cloudtrail:0000472:e45abdf8-8fc3-4a88-b43b-b97840d8520b", "row_index": 472, "timestamp": "2017-02-12T21:41:11Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e45abdf8-8fc3-4a88-b43b-b97840d8520b", "eventTime": "2017-02-12T21:41:11Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b974681-4440-4a3e-83dd-92fb227c71a5", "record_id": "flaws_cloudtrail:0000473:b974681-4440-4a3e-83dd-92fb227c71a5", "row_index": 473, "timestamp": "2017-02-12T21:41:11Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b974681-4440-4a3e-83dd-92fb227c71a5", "eventTime": "2017-02-12T21:41:11Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "374d5bca-0c60-4124-bff5-da9b66eec79a", "record_id": "flaws_cloudtrail:0000474:374d5bca-0c60-4124-bff5-da9b66eec79a", "row_index": 474, "timestamp": "2017-02-12T21:41:11Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "374d5bca-0c60-4124-bff5-da9b66eec79a", "eventTime": "2017-02-12T21:41:11Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dc9823b-57b5-44ef-b123-5ce275c40f0b", "record_id": "flaws_cloudtrail:0000475:3dc9823b-57b5-44ef-b123-5ce275c40f0b", "row_index": 475, "timestamp": "2017-02-12T21:41:11Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dc9823b-57b5-44ef-b123-5ce275c40f0b", "eventTime": "2017-02-12T21:41:11Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4bd1253-7ccb-44d7-be1a-ef202693716f", "record_id": "flaws_cloudtrail:0000476:b4bd1253-7ccb-44d7-be1a-ef202693716f", "row_index": 476, "timestamp": "2017-02-12T21:41:11Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4bd1253-7ccb-44d7-be1a-ef202693716f", "eventTime": "2017-02-12T21:41:11Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035af27e-b080-4a3f-afd1-df042d37900e", "record_id": "flaws_cloudtrail:0000477:035af27e-b080-4a3f-afd1-df042d37900e", "row_index": 477, "timestamp": "2017-02-12T21:41:12Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035af27e-b080-4a3f-afd1-df042d37900e", "eventTime": "2017-02-12T21:41:12Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1706e0e1-5218-4c75-a97c-88c748c63723", "record_id": "flaws_cloudtrail:0000478:1706e0e1-5218-4c75-a97c-88c748c63723", "row_index": 478, "timestamp": "2017-02-12T21:41:12Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1706e0e1-5218-4c75-a97c-88c748c63723", "eventTime": "2017-02-12T21:41:12Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7640c6c4-0bd6-4170-81a9-c87c032260f", "record_id": "flaws_cloudtrail:0000479:7640c6c4-0bd6-4170-81a9-c87c032260f", "row_index": 479, "timestamp": "2017-02-12T21:41:12Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7640c6c4-0bd6-4170-81a9-c87c032260f", "eventTime": "2017-02-12T21:41:12Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "502673fdf-5e26-44c3-8bcf-a55fe3f626a1", "record_id": "flaws_cloudtrail:0000480:502673fdf-5e26-44c3-8bcf-a55fe3f626a1", "row_index": 480, "timestamp": "2017-02-12T21:41:12Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "502673fdf-5e26-44c3-8bcf-a55fe3f626a1", "eventTime": "2017-02-12T21:41:12Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cd68699-032d-49b5-9e13-d1e3dfc728784", "record_id": "flaws_cloudtrail:0000481:8cd68699-032d-49b5-9e13-d1e3dfc728784", "row_index": 481, "timestamp": "2017-02-12T21:41:12Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cd68699-032d-49b5-9e13-d1e3dfc728784", "eventTime": "2017-02-12T21:41:12Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33396-0bfd-4b8e-84a0-7fba88ea7eab", "record_id": "flaws_cloudtrail:0000482:33396-0bfd-4b8e-84a0-7fba88ea7eab", "row_index": 482, "timestamp": "2017-02-12T21:41:12Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33396-0bfd-4b8e-84a0-7fba88ea7eab", "eventTime": "2017-02-12T21:41:12Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce0d3837-6a3f-4267-96ef-a08590648f26", "record_id": "flaws_cloudtrail:0000483:ce0d3837-6a3f-4267-96ef-a08590648f26", "row_index": 483, "timestamp": "2017-02-12T21:41:12Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce0d3837-6a3f-4267-96ef-a08590648f26", "eventTime": "2017-02-12T21:41:12Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f0bc26-9592-4670-b8c0-f7ec465226e3", "record_id": "flaws_cloudtrail:0000484:f6f0bc26-9592-4670-b8c0-f7ec465226e3", "row_index": 484, "timestamp": "2017-02-12T21:41:20Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIA79EXPHZ8SRL55OOE", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f0bc26-9592-4670-b8c0-f7ec465226e3", "eventTime": "2017-02-12T21:41:20Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA79EXPHZ8SRL55OOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "responseElements": {"accessKey": {"accessKeyId": "AKIAKZ5DMM2L61KYGILK", "status": "Active", "createDate": "Feb 12, 2017 9:41:20 PM"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4632b893-9216-4e3d-80dc-4f382d815af3", "record_id": "flaws_cloudtrail:0000485:4632b893-9216-4e3d-80dc-4f382d815af3", "row_index": 485, "timestamp": "2017-02-12T21:46:48Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 622, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4632b893-9216-4e3d-80dc-4f382d815af3", "eventTime": "2017-02-12T21:46:48Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c65e7937-3bde-42b1-b4d2-2fb394137f", "record_id": "flaws_cloudtrail:0000486:c65e7937-3bde-42b1-b4d2-2fb394137f", "row_index": 486, "timestamp": "2017-02-12T21:46:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c65e7937-3bde-42b1-b4d2-2fb394137f", "eventTime": "2017-02-12T21:46:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbbbe89-8a1f-447d-b326-b11280d8021b", "record_id": "flaws_cloudtrail:0000487:3fbbbe89-8a1f-447d-b326-b11280d8021b", "row_index": 487, "timestamp": "2017-02-12T21:46:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbbbe89-8a1f-447d-b326-b11280d8021b", "eventTime": "2017-02-12T21:46:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab623fc7-20b9-454a-b50f-e660bd3a76b3", "record_id": "flaws_cloudtrail:0000488:ab623fc7-20b9-454a-b50f-e660bd3a76b3", "row_index": 488, "timestamp": "2017-02-12T21:46:52Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab623fc7-20b9-454a-b50f-e660bd3a76b3", "eventTime": "2017-02-12T21:46:52Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db88de83-6c58-49e3-84f3-9af49c2175d4", "record_id": "flaws_cloudtrail:0000489:db88de83-6c58-49e3-84f3-9af49c2175d4", "row_index": 489, "timestamp": "2017-02-12T21:53:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db88de83-6c58-49e3-84f3-9af49c2175d4", "eventTime": "2017-02-12T21:53:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-cli/1.11.47 Python/2.7.3 Linux/3.2.0-4-amd64 botocore/1.5.10]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7c601ae-b8e9-47e9-9eb3-67bc85a3546e", "record_id": "flaws_cloudtrail:0000490:c7c601ae-b8e9-47e9-9eb3-67bc85a3546e", "row_index": 490, "timestamp": "2017-02-12T21:55:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 618, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7c601ae-b8e9-47e9-9eb3-67bc85a3546e", "eventTime": "2017-02-12T21:55:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2c01ed-8918-4e29-bb63-df94d279eafb", "record_id": "flaws_cloudtrail:0000491:0f2c01ed-8918-4e29-bb63-df94d279eafb", "row_index": 491, "timestamp": "2017-02-12T21:55:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2c01ed-8918-4e29-bb63-df94d279eafb", "eventTime": "2017-02-12T21:55:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cd2320c-742b-41b2-b58c-a5c24dfa3caf", "record_id": "flaws_cloudtrail:0000492:8cd2320c-742b-41b2-b58c-a5c24dfa3caf", "row_index": 492, "timestamp": "2017-02-12T21:55:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cd2320c-742b-41b2-b58c-a5c24dfa3caf", "eventTime": "2017-02-12T21:55:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc02d202-3150-4286-a29d-b1c3b4fb569e", "record_id": "flaws_cloudtrail:0000493:cc02d202-3150-4286-a29d-b1c3b4fb569e", "row_index": 493, "timestamp": "2017-02-12T21:58:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc02d202-3150-4286-a29d-b1c3b4fb569e", "eventTime": "2017-02-12T21:58:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf9b5b8e-d4ca-44d6-a2f4-918474be9b9", "record_id": "flaws_cloudtrail:0000494:cf9b5b8e-d4ca-44d6-a2f4-918474be9b9", "row_index": 494, "timestamp": "2017-02-12T21:58:30Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf9b5b8e-d4ca-44d6-a2f4-918474be9b9", "eventTime": "2017-02-12T21:58:30Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05acbf3b-98e5-4d86-be3b-68e9ed2c61c2", "record_id": "flaws_cloudtrail:0000495:05acbf3b-98e5-4d86-be3b-68e9ed2c61c2", "row_index": 495, "timestamp": "2017-02-12T21:58:30Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05acbf3b-98e5-4d86-be3b-68e9ed2c61c2", "eventTime": "2017-02-12T21:58:30Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a2b0151-996e-4eae-8ee9-e5fa9f3cda0b", "record_id": "flaws_cloudtrail:0000496:6a2b0151-996e-4eae-8ee9-e5fa9f3cda0b", "row_index": 496, "timestamp": "2017-02-12T21:58:30Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a2b0151-996e-4eae-8ee9-e5fa9f3cda0b", "eventTime": "2017-02-12T21:58:30Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f4eb29-c952-49dc-a6fd-e60c6061ddd9", "record_id": "flaws_cloudtrail:0000497:b1f4eb29-c952-49dc-a6fd-e60c6061ddd9", "row_index": 497, "timestamp": "2017-02-12T22:16:51Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f4eb29-c952-49dc-a6fd-e60c6061ddd9", "eventTime": "2017-02-12T22:16:51Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dffb8ecf-a430-494a-9d4d-c65c5a4a3ea0", "record_id": "flaws_cloudtrail:0000498:dffb8ecf-a430-494a-9d4d-c65c5a4a3ea0", "row_index": 498, "timestamp": "2017-02-12T22:17:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 622, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dffb8ecf-a430-494a-9d4d-c65c5a4a3ea0", "eventTime": "2017-02-12T22:17:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "092cbe02-cfa4-488a-90c4-69418d6c5ce", "record_id": "flaws_cloudtrail:0000499:092cbe02-cfa4-488a-90c4-69418d6c5ce", "row_index": 499, "timestamp": "2017-02-12T22:17:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "092cbe02-cfa4-488a-90c4-69418d6c5ce", "eventTime": "2017-02-12T22:17:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56140-6fd2-4f53-812c-265c438c03e3", "record_id": "flaws_cloudtrail:0000500:56140-6fd2-4f53-812c-265c438c03e3", "row_index": 500, "timestamp": "2017-02-12T22:17:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56140-6fd2-4f53-812c-265c438c03e3", "eventTime": "2017-02-12T22:17:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f631dc1-5752-48e2-9b08-e8df0a74a4e0", "record_id": "flaws_cloudtrail:0000501:0f631dc1-5752-48e2-9b08-e8df0a74a4e0", "row_index": 501, "timestamp": "2017-02-12T22:17:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f631dc1-5752-48e2-9b08-e8df0a74a4e0", "eventTime": "2017-02-12T22:17:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6981b184-93db-4a1f-837a-2c40ccde5fab", "record_id": "flaws_cloudtrail:0000502:6981b184-93db-4a1f-837a-2c40ccde5fab", "row_index": 502, "timestamp": "2017-02-12T22:17:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6981b184-93db-4a1f-837a-2c40ccde5fab", "eventTime": "2017-02-12T22:17:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056305c7-409a-40fa-be83-b435d10413", "record_id": "flaws_cloudtrail:0000503:056305c7-409a-40fa-be83-b435d10413", "row_index": 503, "timestamp": "2017-02-12T22:17:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056305c7-409a-40fa-be83-b435d10413", "eventTime": "2017-02-12T22:17:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f601c1c-5b65-40f0-977e-d1a5c4935086", "record_id": "flaws_cloudtrail:0000504:5f601c1c-5b65-40f0-977e-d1a5c4935086", "row_index": 504, "timestamp": "2017-02-12T22:17:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f601c1c-5b65-40f0-977e-d1a5c4935086", "eventTime": "2017-02-12T22:17:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eac392fa-13d7-4dcd-bc40-334f4a5f034b", "record_id": "flaws_cloudtrail:0000505:eac392fa-13d7-4dcd-bc40-334f4a5f034b", "row_index": 505, "timestamp": "2017-02-12T22:17:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eac392fa-13d7-4dcd-bc40-334f4a5f034b", "eventTime": "2017-02-12T22:17:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b19b7b9-f0c6-44a8-8b33-65529ecf41", "record_id": "flaws_cloudtrail:0000506:4b19b7b9-f0c6-44a8-8b33-65529ecf41", "row_index": 506, "timestamp": "2017-02-12T22:17:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b19b7b9-f0c6-44a8-8b33-65529ecf41", "eventTime": "2017-02-12T22:17:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "168177cf-7be9-4ce5-96c5-9917a51de347", "record_id": "flaws_cloudtrail:0000507:168177cf-7be9-4ce5-96c5-9917a51de347", "row_index": 507, "timestamp": "2017-02-12T22:17:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "168177cf-7be9-4ce5-96c5-9917a51de347", "eventTime": "2017-02-12T22:17:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66e2194e-08ec-4be6-80f8-1c2c0674c10a", "record_id": "flaws_cloudtrail:0000508:66e2194e-08ec-4be6-80f8-1c2c0674c10a", "row_index": 508, "timestamp": "2017-02-12T22:17:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66e2194e-08ec-4be6-80f8-1c2c0674c10a", "eventTime": "2017-02-12T22:17:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd11765-817e-44c0-81f7-5fc84bff30ae", "record_id": "flaws_cloudtrail:0000509:fbd11765-817e-44c0-81f7-5fc84bff30ae", "row_index": 509, "timestamp": "2017-02-12T22:17:30Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd11765-817e-44c0-81f7-5fc84bff30ae", "eventTime": "2017-02-12T22:17:30Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698a9d1c-2d34-456e-bbd7-b1f4c565bc15", "record_id": "flaws_cloudtrail:0000510:698a9d1c-2d34-456e-bbd7-b1f4c565bc15", "row_index": 510, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698a9d1c-2d34-456e-bbd7-b1f4c565bc15", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f9ba775-c178-4f9e-9a5d-a437335c5344", "record_id": "flaws_cloudtrail:0000511:0f9ba775-c178-4f9e-9a5d-a437335c5344", "row_index": 511, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f9ba775-c178-4f9e-9a5d-a437335c5344", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e7989d-3da9-48bd-8902-bd2722c0d987", "record_id": "flaws_cloudtrail:0000512:30e7989d-3da9-48bd-8902-bd2722c0d987", "row_index": 512, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e7989d-3da9-48bd-8902-bd2722c0d987", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6e18cc-c0d9-46b9-9f96-4d234114ec2", "record_id": "flaws_cloudtrail:0000513:5c6e18cc-c0d9-46b9-9f96-4d234114ec2", "row_index": 513, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6e18cc-c0d9-46b9-9f96-4d234114ec2", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8205ca-d564-4b3a-a559-e9bf40f67bd4", "record_id": "flaws_cloudtrail:0000514:0f8205ca-d564-4b3a-a559-e9bf40f67bd4", "row_index": 514, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8205ca-d564-4b3a-a559-e9bf40f67bd4", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71acf630-eb80-4ffd-b93e-56d7f7d6390e", "record_id": "flaws_cloudtrail:0000515:71acf630-eb80-4ffd-b93e-56d7f7d6390e", "row_index": 515, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71acf630-eb80-4ffd-b93e-56d7f7d6390e", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67636f3e-8d70-4b37-98b0-3e309354", "record_id": "flaws_cloudtrail:0000516:67636f3e-8d70-4b37-98b0-3e309354", "row_index": 516, "timestamp": "2017-02-12T22:17:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67636f3e-8d70-4b37-98b0-3e309354", "eventTime": "2017-02-12T22:17:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673e7ce4-6c59-4360-8bbd-a0e8330f6362", "record_id": "flaws_cloudtrail:0000517:673e7ce4-6c59-4360-8bbd-a0e8330f6362", "row_index": 517, "timestamp": "2017-02-12T22:17:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673e7ce4-6c59-4360-8bbd-a0e8330f6362", "eventTime": "2017-02-12T22:17:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14d78802-8210-49fe-8970-89bde9c319a5", "record_id": "flaws_cloudtrail:0000518:14d78802-8210-49fe-8970-89bde9c319a5", "row_index": 518, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14d78802-8210-49fe-8970-89bde9c319a5", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f123dfb-2eff-40fd-beb8-6e60613df6c4", "record_id": "flaws_cloudtrail:0000519:8f123dfb-2eff-40fd-beb8-6e60613df6c4", "row_index": 519, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f123dfb-2eff-40fd-beb8-6e60613df6c4", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58676db-bdd1-4117-8f81-a56ada21e9a7", "record_id": "flaws_cloudtrail:0000520:58676db-bdd1-4117-8f81-a56ada21e9a7", "row_index": 520, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58676db-bdd1-4117-8f81-a56ada21e9a7", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff2edb45-55d9-44ca-a8b3-0441ebed7a27", "record_id": "flaws_cloudtrail:0000521:ff2edb45-55d9-44ca-a8b3-0441ebed7a27", "row_index": 521, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff2edb45-55d9-44ca-a8b3-0441ebed7a27", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6afff942-cb97-4685-bae8-8c2c0e00dfa4", "record_id": "flaws_cloudtrail:0000522:6afff942-cb97-4685-bae8-8c2c0e00dfa4", "row_index": 522, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6afff942-cb97-4685-bae8-8c2c0e00dfa4", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f725a2e-35fe-4345-a48d-0e0c3c9fb3cb", "record_id": "flaws_cloudtrail:0000523:8f725a2e-35fe-4345-a48d-0e0c3c9fb3cb", "row_index": 523, "timestamp": "2017-02-12T22:17:44Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f725a2e-35fe-4345-a48d-0e0c3c9fb3cb", "eventTime": "2017-02-12T22:17:44Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b50f365-97aa-404d-a5dd-cee9e6426e60", "record_id": "flaws_cloudtrail:0000524:1b50f365-97aa-404d-a5dd-cee9e6426e60", "row_index": 524, "timestamp": "2017-02-12T22:17:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b50f365-97aa-404d-a5dd-cee9e6426e60", "eventTime": "2017-02-12T22:17:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a7aae5-0536-4603-95a3-cf656b1c776b", "record_id": "flaws_cloudtrail:0000525:a6a7aae5-0536-4603-95a3-cf656b1c776b", "row_index": 525, "timestamp": "2017-02-12T22:17:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a7aae5-0536-4603-95a3-cf656b1c776b", "eventTime": "2017-02-12T22:17:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b81d4c3-8dd2-468c-a48e-92c95366ea28", "record_id": "flaws_cloudtrail:0000526:6b81d4c3-8dd2-468c-a48e-92c95366ea28", "row_index": 526, "timestamp": "2017-02-12T22:17:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b81d4c3-8dd2-468c-a48e-92c95366ea28", "eventTime": "2017-02-12T22:17:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee7af0d-fc51-4340-8f66-118cd8af649e", "record_id": "flaws_cloudtrail:0000527:0ee7af0d-fc51-4340-8f66-118cd8af649e", "row_index": 527, "timestamp": "2017-02-12T22:17:46Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee7af0d-fc51-4340-8f66-118cd8af649e", "eventTime": "2017-02-12T22:17:46Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2000e9f-9763-463e-b563-8ecb903ab085", "record_id": "flaws_cloudtrail:0000528:d2000e9f-9763-463e-b563-8ecb903ab085", "row_index": 528, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2000e9f-9763-463e-b563-8ecb903ab085", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef606b3f-5b36-45a6-843e-d8fb2a106461", "record_id": "flaws_cloudtrail:0000529:ef606b3f-5b36-45a6-843e-d8fb2a106461", "row_index": 529, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef606b3f-5b36-45a6-843e-d8fb2a106461", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed832a8-33b6-4158-9a33-93b2000f8a7d", "record_id": "flaws_cloudtrail:0000530:aed832a8-33b6-4158-9a33-93b2000f8a7d", "row_index": 530, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed832a8-33b6-4158-9a33-93b2000f8a7d", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32fad266-fde2-4947-8a0b-e3c15e129f67", "record_id": "flaws_cloudtrail:0000531:32fad266-fde2-4947-8a0b-e3c15e129f67", "row_index": 531, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32fad266-fde2-4947-8a0b-e3c15e129f67", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b57d585d-e807-4d50-bd77-028dedd7cfbd", "record_id": "flaws_cloudtrail:0000532:b57d585d-e807-4d50-bd77-028dedd7cfbd", "row_index": 532, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b57d585d-e807-4d50-bd77-028dedd7cfbd", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a088591ff-3223-498d-8e80-f849a997770", "record_id": "flaws_cloudtrail:0000533:a088591ff-3223-498d-8e80-f849a997770", "row_index": 533, "timestamp": "2017-02-12T22:18:01Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a088591ff-3223-498d-8e80-f849a997770", "eventTime": "2017-02-12T22:18:01Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b89b342-3d8f-4300-b469-89530f7dc84b", "record_id": "flaws_cloudtrail:0000534:5b89b342-3d8f-4300-b469-89530f7dc84b", "row_index": 534, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b89b342-3d8f-4300-b469-89530f7dc84b", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c8c10de-f155-4d25-ad8c-0e5a753c5eff", "record_id": "flaws_cloudtrail:0000535:8c8c10de-f155-4d25-ad8c-0e5a753c5eff", "row_index": 535, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c8c10de-f155-4d25-ad8c-0e5a753c5eff", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "102eee98-a82b-4cd5-a856-d977495f740f0", "record_id": "flaws_cloudtrail:0000536:102eee98-a82b-4cd5-a856-d977495f740f0", "row_index": 536, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "102eee98-a82b-4cd5-a856-d977495f740f0", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61b238de-1670-4e6e-8211-1de0ec6ab99b", "record_id": "flaws_cloudtrail:0000537:61b238de-1670-4e6e-8211-1de0ec6ab99b", "row_index": 537, "timestamp": "2017-02-12T22:18:01Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61b238de-1670-4e6e-8211-1de0ec6ab99b", "eventTime": "2017-02-12T22:18:01Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ccab580-0e18-4602-9372-b7541dd131181", "record_id": "flaws_cloudtrail:0000538:2ccab580-0e18-4602-9372-b7541dd131181", "row_index": 538, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ccab580-0e18-4602-9372-b7541dd131181", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14dd8ee-5bb2-47f4-b537-cb88aec604e4", "record_id": "flaws_cloudtrail:0000539:e14dd8ee-5bb2-47f4-b537-cb88aec604e4", "row_index": 539, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14dd8ee-5bb2-47f4-b537-cb88aec604e4", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae147318-bb78-49b7-8929-4690ed85e35f", "record_id": "flaws_cloudtrail:0000540:2ae147318-bb78-49b7-8929-4690ed85e35f", "row_index": 540, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae147318-bb78-49b7-8929-4690ed85e35f", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957ebb28-7c86-4985-9b98-285869ec0", "record_id": "flaws_cloudtrail:0000541:957ebb28-7c86-4985-9b98-285869ec0", "row_index": 541, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957ebb28-7c86-4985-9b98-285869ec0", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc29a92-ee22-43a1-baf8-ec49b9c399740", "record_id": "flaws_cloudtrail:0000542:cbc29a92-ee22-43a1-baf8-ec49b9c399740", "row_index": 542, "timestamp": "2017-02-12T22:18:01Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc29a92-ee22-43a1-baf8-ec49b9c399740", "eventTime": "2017-02-12T22:18:01Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c39e6c1-1218-46f8-838d-c6af8ad65c7a", "record_id": "flaws_cloudtrail:0000543:2c39e6c1-1218-46f8-838d-c6af8ad65c7a", "row_index": 543, "timestamp": "2017-02-12T22:18:12Z", "event_type": "PutBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c39e6c1-1218-46f8-838d-c6af8ad65c7a", "eventTime": "2017-02-12T22:18:12Z", "eventName": "PutBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""], "WebsiteConfiguration": {"IndexDocument": {"Suffix": "index.html"}, "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16bd9db9-f76f-4857-8852-baa5ddbbac83", "record_id": "flaws_cloudtrail:0000544:16bd9db9-f76f-4857-8852-baa5ddbbac83", "row_index": 544, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16bd9db9-f76f-4857-8852-baa5ddbbac83", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8da2cef-cb2a-4f64-b48e-61bb735d7d76", "record_id": "flaws_cloudtrail:0000545:c8da2cef-cb2a-4f64-b48e-61bb735d7d76", "row_index": 545, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8da2cef-cb2a-4f64-b48e-61bb735d7d76", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17f296b-95c2-425f-9848-12e534fda77e", "record_id": "flaws_cloudtrail:0000546:f17f296b-95c2-425f-9848-12e534fda77e", "row_index": 546, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17f296b-95c2-425f-9848-12e534fda77e", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "494768f62-0123-4446-9aad-bc87848e29f9", "record_id": "flaws_cloudtrail:0000547:494768f62-0123-4446-9aad-bc87848e29f9", "row_index": 547, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "494768f62-0123-4446-9aad-bc87848e29f9", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11a32bce-7bcc-42d8-95fe-9e87ed3abc23", "record_id": "flaws_cloudtrail:0000548:11a32bce-7bcc-42d8-95fe-9e87ed3abc23", "row_index": 548, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11a32bce-7bcc-42d8-95fe-9e87ed3abc23", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5807be-02f4-4bd1-a754-61b58b723c6a", "record_id": "flaws_cloudtrail:0000549:bb5807be-02f4-4bd1-a754-61b58b723c6a", "row_index": 549, "timestamp": "2017-02-12T22:18:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5807be-02f4-4bd1-a754-61b58b723c6a", "eventTime": "2017-02-12T22:18:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1811ac51-02d4-474c-9599-342ee4ff6ad5", "record_id": "flaws_cloudtrail:0000550:1811ac51-02d4-474c-9599-342ee4ff6ad5", "row_index": 550, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1811ac51-02d4-474c-9599-342ee4ff6ad5", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472db609-287d-4131-9f3b-1f2b924a891d", "record_id": "flaws_cloudtrail:0000551:472db609-287d-4131-9f3b-1f2b924a891d", "row_index": 551, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472db609-287d-4131-9f3b-1f2b924a891d", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098189b07-a2cb-4c96-b5a1-beadd1a081208", "record_id": "flaws_cloudtrail:0000552:098189b07-a2cb-4c96-b5a1-beadd1a081208", "row_index": 552, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098189b07-a2cb-4c96-b5a1-beadd1a081208", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7df97af-3fed-4159-9eb2-f8e51ba698ca", "record_id": "flaws_cloudtrail:0000553:e7df97af-3fed-4159-9eb2-f8e51ba698ca", "row_index": 553, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7df97af-3fed-4159-9eb2-f8e51ba698ca", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "680ed2d0-490d-4de5-b964-0ab47d94f45d", "record_id": "flaws_cloudtrail:0000554:680ed2d0-490d-4de5-b964-0ab47d94f45d", "row_index": 554, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "680ed2d0-490d-4de5-b964-0ab47d94f45d", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fba28da-c35f-4767-bb18-824c4075a805", "record_id": "flaws_cloudtrail:0000555:9fba28da-c35f-4767-bb18-824c4075a805", "row_index": 555, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fba28da-c35f-4767-bb18-824c4075a805", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c368d59-1d9e-4758-83e8-c9addcfd3ea6", "record_id": "flaws_cloudtrail:0000556:4c368d59-1d9e-4758-83e8-c9addcfd3ea6", "row_index": 556, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c368d59-1d9e-4758-83e8-c9addcfd3ea6", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89db7544-b5b2-4106-bcca-2eec5b1e5c72", "record_id": "flaws_cloudtrail:0000557:89db7544-b5b2-4106-bcca-2eec5b1e5c72", "row_index": 557, "timestamp": "2017-02-12T22:18:35Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89db7544-b5b2-4106-bcca-2eec5b1e5c72", "eventTime": "2017-02-12T22:18:35Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66644f-06f4-464a-884b-195ff848c53f", "record_id": "flaws_cloudtrail:0000558:66644f-06f4-464a-884b-195ff848c53f", "row_index": 558, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66644f-06f4-464a-884b-195ff848c53f", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f0b63aa-ef71-4149-9e0d-6140910928a0", "record_id": "flaws_cloudtrail:0000559:4f0b63aa-ef71-4149-9e0d-6140910928a0", "row_index": 559, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f0b63aa-ef71-4149-9e0d-6140910928a0", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd730f47-3df4-435c-ab12-8fee38db3fb9", "record_id": "flaws_cloudtrail:0000560:dd730f47-3df4-435c-ab12-8fee38db3fb9", "row_index": 560, "timestamp": "2017-02-12T22:18:35Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd730f47-3df4-435c-ab12-8fee38db3fb9", "eventTime": "2017-02-12T22:18:35Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2278fdc2-9bef-450e-a08b-add6224839fd", "record_id": "flaws_cloudtrail:0000561:2278fdc2-9bef-450e-a08b-add6224839fd", "row_index": 561, "timestamp": "2017-02-12T22:18:36Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2278fdc2-9bef-450e-a08b-add6224839fd", "eventTime": "2017-02-12T22:18:36Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611034e32-c2fe-41b0-89d0-d7c7c8fc2a03", "record_id": "flaws_cloudtrail:0000562:611034e32-c2fe-41b0-89d0-d7c7c8fc2a03", "row_index": 562, "timestamp": "2017-02-12T22:18:37Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611034e32-c2fe-41b0-89d0-d7c7c8fc2a03", "eventTime": "2017-02-12T22:18:37Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd707df3-5246-400d-a310-6b982c0bee95", "record_id": "flaws_cloudtrail:0000563:dd707df3-5246-400d-a310-6b982c0bee95", "row_index": 563, "timestamp": "2017-02-12T22:18:37Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd707df3-5246-400d-a310-6b982c0bee95", "eventTime": "2017-02-12T22:18:37Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87213e9f-d96e-4fb3-98bf-ee6eacac5925", "record_id": "flaws_cloudtrail:0000564:87213e9f-d96e-4fb3-98bf-ee6eacac5925", "row_index": 564, "timestamp": "2017-02-12T22:18:37Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87213e9f-d96e-4fb3-98bf-ee6eacac5925", "eventTime": "2017-02-12T22:18:37Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6201e5f-9f68-4734-8040-ff07b3f8a17f", "record_id": "flaws_cloudtrail:0000565:f6201e5f-9f68-4734-8040-ff07b3f8a17f", "row_index": 565, "timestamp": "2017-02-12T22:18:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6201e5f-9f68-4734-8040-ff07b3f8a17f", "eventTime": "2017-02-12T22:18:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "652cec90-c915-47ed-9665-8447f7e0c309", "record_id": "flaws_cloudtrail:0000566:652cec90-c915-47ed-9665-8447f7e0c309", "row_index": 566, "timestamp": "2017-02-12T22:18:37Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "652cec90-c915-47ed-9665-8447f7e0c309", "eventTime": "2017-02-12T22:18:37Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fca86a1-8b88-44a7-907f-fbd812591a5d", "record_id": "flaws_cloudtrail:0000567:4fca86a1-8b88-44a7-907f-fbd812591a5d", "row_index": 567, "timestamp": "2017-02-12T22:18:37Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fca86a1-8b88-44a7-907f-fbd812591a5d", "eventTime": "2017-02-12T22:18:37Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea7f7bb-1e6f-440d-bcd8-5b57516bbf28", "record_id": "flaws_cloudtrail:0000568:fea7f7bb-1e6f-440d-bcd8-5b57516bbf28", "row_index": 568, "timestamp": "2017-02-12T22:18:37Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea7f7bb-1e6f-440d-bcd8-5b57516bbf28", "eventTime": "2017-02-12T22:18:37Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "652fb862-6789-40fe-8463-a8ee7a6968e3", "record_id": "flaws_cloudtrail:0000569:652fb862-6789-40fe-8463-a8ee7a6968e3", "row_index": 569, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "652fb862-6789-40fe-8463-a8ee7a6968e3", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ac6596-3aa2-4d51-9b0a-cec501af7e75", "record_id": "flaws_cloudtrail:0000570:55ac6596-3aa2-4d51-9b0a-cec501af7e75", "row_index": 570, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ac6596-3aa2-4d51-9b0a-cec501af7e75", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea9903d-0f4d-41f2-81ed-92f9b67c91b8", "record_id": "flaws_cloudtrail:0000571:6ea9903d-0f4d-41f2-81ed-92f9b67c91b8", "row_index": 571, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea9903d-0f4d-41f2-81ed-92f9b67c91b8", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e956f6e3-77a8-41ee-9f86-e3986e754ffc", "record_id": "flaws_cloudtrail:0000572:e956f6e3-77a8-41ee-9f86-e3986e754ffc", "row_index": 572, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e956f6e3-77a8-41ee-9f86-e3986e754ffc", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e6ab9cf-2ddd-4909-85fe-1891144c4f5f", "record_id": "flaws_cloudtrail:0000573:1e6ab9cf-2ddd-4909-85fe-1891144c4f5f", "row_index": 573, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e6ab9cf-2ddd-4909-85fe-1891144c4f5f", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b2a6d45-f529-4dc1-89e4-b8f1bc01bcf0", "record_id": "flaws_cloudtrail:0000574:0b2a6d45-f529-4dc1-89e4-b8f1bc01bcf0", "row_index": 574, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b2a6d45-f529-4dc1-89e4-b8f1bc01bcf0", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3b187962-204c-447e-914b-a60595939149", "record_id": "flaws_cloudtrail:0000575:c3b187962-204c-447e-914b-a60595939149", "row_index": 575, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3b187962-204c-447e-914b-a60595939149", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49d60bf5-d36a-4517-be09-6b4517c0c421", "record_id": "flaws_cloudtrail:0000576:49d60bf5-d36a-4517-be09-6b4517c0c421", "row_index": 576, "timestamp": "2017-02-12T22:18:38Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49d60bf5-d36a-4517-be09-6b4517c0c421", "eventTime": "2017-02-12T22:18:38Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6cc090b-251f-4ac8-8a4b-be9916310215", "record_id": "flaws_cloudtrail:0000577:d6cc090b-251f-4ac8-8a4b-be9916310215", "row_index": 577, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6cc090b-251f-4ac8-8a4b-be9916310215", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a66bcbe-78b3-4c2b-833b-b498a5cefcc1", "record_id": "flaws_cloudtrail:0000578:1a66bcbe-78b3-4c2b-833b-b498a5cefcc1", "row_index": 578, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a66bcbe-78b3-4c2b-833b-b498a5cefcc1", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50467bf4-d744-4767-b990-a0a07403ee7f", "record_id": "flaws_cloudtrail:0000579:50467bf4-d744-4767-b990-a0a07403ee7f", "row_index": 579, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50467bf4-d744-4767-b990-a0a07403ee7f", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e0f0552-b9fc-41b2-b97f-01e470a5e7bc", "record_id": "flaws_cloudtrail:0000580:3e0f0552-b9fc-41b2-b97f-01e470a5e7bc", "row_index": 580, "timestamp": "2017-02-12T22:18:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e0f0552-b9fc-41b2-b97f-01e470a5e7bc", "eventTime": "2017-02-12T22:18:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d246304d-fcf4-4325-b0ac-f5b2514e3bbf", "record_id": "flaws_cloudtrail:0000581:5d246304d-fcf4-4325-b0ac-f5b2514e3bbf", "row_index": 581, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d246304d-fcf4-4325-b0ac-f5b2514e3bbf", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08d9c5f-120f-455d-9300-40d144d075759", "record_id": "flaws_cloudtrail:0000582:c08d9c5f-120f-455d-9300-40d144d075759", "row_index": 582, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08d9c5f-120f-455d-9300-40d144d075759", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "971a01dc-77ba-49c5-9d60-1e6d5bd360a8", "record_id": "flaws_cloudtrail:0000583:971a01dc-77ba-49c5-9d60-1e6d5bd360a8", "row_index": 583, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "971a01dc-77ba-49c5-9d60-1e6d5bd360a8", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a732800-e972-4037-8244-eadd4c37b5a7", "record_id": "flaws_cloudtrail:0000584:a732800-e972-4037-8244-eadd4c37b5a7", "row_index": 584, "timestamp": "2017-02-12T22:18:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a732800-e972-4037-8244-eadd4c37b5a7", "eventTime": "2017-02-12T22:18:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49bfe94c-7fc7-4977-aeff-dd505ec80471", "record_id": "flaws_cloudtrail:0000585:49bfe94c-7fc7-4977-aeff-dd505ec80471", "row_index": 585, "timestamp": "2017-02-12T22:18:44Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49bfe94c-7fc7-4977-aeff-dd505ec80471", "eventTime": "2017-02-12T22:18:44Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "877503d2-e861-4b63-9787-647e9b9bc03b", "record_id": "flaws_cloudtrail:0000586:877503d2-e861-4b63-9787-647e9b9bc03b", "row_index": 586, "timestamp": "2017-02-12T22:18:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "877503d2-e861-4b63-9787-647e9b9bc03b", "eventTime": "2017-02-12T22:18:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "627845e8e-f312-4d69-9dca-a8aede199b51", "record_id": "flaws_cloudtrail:0000587:627845e8e-f312-4d69-9dca-a8aede199b51", "row_index": 587, "timestamp": "2017-02-12T22:18:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "627845e8e-f312-4d69-9dca-a8aede199b51", "eventTime": "2017-02-12T22:18:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b5cd1ac-71aa-4a9b-a013-cc83e6d2f994", "record_id": "flaws_cloudtrail:0000588:7b5cd1ac-71aa-4a9b-a013-cc83e6d2f994", "row_index": 588, "timestamp": "2017-02-12T22:18:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b5cd1ac-71aa-4a9b-a013-cc83e6d2f994", "eventTime": "2017-02-12T22:18:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991a3fe0-8af3-4c55-8bfd-6374e63e1526", "record_id": "flaws_cloudtrail:0000589:991a3fe0-8af3-4c55-8bfd-6374e63e1526", "row_index": 589, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991a3fe0-8af3-4c55-8bfd-6374e63e1526", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0df4e32e-4e68-4f6c-84f4-cb57aef0bff4", "record_id": "flaws_cloudtrail:0000590:0df4e32e-4e68-4f6c-84f4-cb57aef0bff4", "row_index": 590, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0df4e32e-4e68-4f6c-84f4-cb57aef0bff4", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898feb8d-dfdc-42dd-ad0a-72fbbc2d155a", "record_id": "flaws_cloudtrail:0000591:898feb8d-dfdc-42dd-ad0a-72fbbc2d155a", "row_index": 591, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898feb8d-dfdc-42dd-ad0a-72fbbc2d155a", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "238878d-4c53-41d4-ad00-1ca41a9f29e1", "record_id": "flaws_cloudtrail:0000592:238878d-4c53-41d4-ad00-1ca41a9f29e1", "row_index": 592, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "238878d-4c53-41d4-ad00-1ca41a9f29e1", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92f3a707-11e7-4118-8533-2c3e1d17e43b", "record_id": "flaws_cloudtrail:0000593:92f3a707-11e7-4118-8533-2c3e1d17e43b", "row_index": 593, "timestamp": "2017-02-12T22:18:59Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92f3a707-11e7-4118-8533-2c3e1d17e43b", "eventTime": "2017-02-12T22:18:59Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3761f25d-5d21-4987-ac95-20fc641e1255", "record_id": "flaws_cloudtrail:0000594:3761f25d-5d21-4987-ac95-20fc641e1255", "row_index": 594, "timestamp": "2017-02-12T22:18:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-internal/3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3761f25d-5d21-4987-ac95-20fc641e1255", "eventTime": "2017-02-12T22:18:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-internal/3", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68bb2756-d31c-472b-a6a1-974438cd6e8a8", "record_id": "flaws_cloudtrail:0000595:68bb2756-d31c-472b-a6a1-974438cd6e8a8", "row_index": 595, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68bb2756-d31c-472b-a6a1-974438cd6e8a8", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d5355ff-4983-4754-932a-ab5501705db9", "record_id": "flaws_cloudtrail:0000596:7d5355ff-4983-4754-932a-ab5501705db9", "row_index": 596, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d5355ff-4983-4754-932a-ab5501705db9", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8d7f96-c645-4eaf-8f29-99cee262fea6", "record_id": "flaws_cloudtrail:0000597:5d8d7f96-c645-4eaf-8f29-99cee262fea6", "row_index": 597, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8d7f96-c645-4eaf-8f29-99cee262fea6", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942a92fb-7bc8-4a57-8c45-d11a0442e470", "record_id": "flaws_cloudtrail:0000598:942a92fb-7bc8-4a57-8c45-d11a0442e470", "row_index": 598, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942a92fb-7bc8-4a57-8c45-d11a0442e470", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82f34d73-d453-44de-9b9c-45e9a41ec752", "record_id": "flaws_cloudtrail:0000599:82f34d73-d453-44de-9b9c-45e9a41ec752", "row_index": 599, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82f34d73-d453-44de-9b9c-45e9a41ec752", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d4ced2-ae21-48c0-baa2-ec9adca064390", "record_id": "flaws_cloudtrail:0000600:01d4ced2-ae21-48c0-baa2-ec9adca064390", "row_index": 600, "timestamp": "2017-02-12T22:18:59Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d4ced2-ae21-48c0-baa2-ec9adca064390", "eventTime": "2017-02-12T22:18:59Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae12b07-8652-4ea5-92a5-d8b07f17e3ff", "record_id": "flaws_cloudtrail:0000601:7ae12b07-8652-4ea5-92a5-d8b07f17e3ff", "row_index": 601, "timestamp": "2017-02-12T22:19:13Z", "event_type": "PutBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 6, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae12b07-8652-4ea5-92a5-d8b07f17e3ff", "eventTime": "2017-02-12T22:19:13Z", "eventName": "PutBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "bucketPolicy": {"Version": "2008-10-17", "Statement": [{"Sid": "AllowPublicRead", "Effect": "Allow", "Principal": {"AWS": "*"}, "Action": "s3:GetObject", "Resource": "arn:aws:s3:::b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud/*"}]}, "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9958e43b-1918-4938-8f97-2cf65679d5a", "record_id": "flaws_cloudtrail:0000602:9958e43b-1918-4938-8f97-2cf65679d5a", "row_index": 602, "timestamp": "2017-02-12T22:24:01Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "[aws-internal/3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9958e43b-1918-4938-8f97-2cf65679d5a", "eventTime": "2017-02-12T22:24:01Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "[aws-internal/3]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4094a5b3-f42a-428f-8ab8-6591a235785bb", "record_id": "flaws_cloudtrail:0000603:4094a5b3-f42a-428f-8ab8-6591a235785bb", "row_index": 603, "timestamp": "2017-02-12T22:24:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAX2HQ6LDA2ZW9LQ2D", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.243.123.0", "user_agent": "[S3Console/0.4]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4094a5b3-f42a-428f-8ab8-6591a235785bb", "eventTime": "2017-02-12T22:24:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.243.123.0", "userAgent": "[S3Console/0.4]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAX2HQ6LDA2ZW9LQ2D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe70f99-bfd0-43dc-9964-a7bb1cd4a133", "record_id": "flaws_cloudtrail:0000604:efe70f99-bfd0-43dc-9964-a7bb1cd4a133", "row_index": 604, "timestamp": "2017-02-12T22:24:02Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe70f99-bfd0-43dc-9964-a7bb1cd4a133", "eventTime": "2017-02-12T22:24:02Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "680b22a7-3c02-4ff0-829a-aeb10cf2e528", "record_id": "flaws_cloudtrail:0000605:680b22a7-3c02-4ff0-829a-aeb10cf2e528", "row_index": 605, "timestamp": "2017-02-12T22:24:02Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "680b22a7-3c02-4ff0-829a-aeb10cf2e528", "eventTime": "2017-02-12T22:24:02Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-12T19:57:05Z"}}}, "requestParameters": {"bucketName": "level2-7b9627b6a8a8284e755ac9e450b4d9e9.flaws.cloud", "versioning": [""]}, "resources": []}}