Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66984e4-391d-486f-b2fb-ccac6fc5b406", "record_id": "flaws_cloudtrail:0000000:66984e4-391d-486f-b2fb-ccac6fc5b406", "row_index": 0, "timestamp": "2019-06-20T21:29:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66984e4-391d-486f-b2fb-ccac6fc5b406", "eventTime": "2019-06-20T21:29:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa19caf7-5373-4269-8622-f16abed7ae66", "record_id": "flaws_cloudtrail:0000001:fa19caf7-5373-4269-8622-f16abed7ae66", "row_index": 1, "timestamp": "2019-06-20T21:29:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa19caf7-5373-4269-8622-f16abed7ae66", "eventTime": "2019-06-20T21:29:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40260b0-2501-4afc-a6b7-a8b7c7ebe928", "record_id": "flaws_cloudtrail:0000002:40260b0-2501-4afc-a6b7-a8b7c7ebe928", "row_index": 2, "timestamp": "2019-06-20T21:29:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40260b0-2501-4afc-a6b7-a8b7c7ebe928", "eventTime": "2019-06-20T21:29:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98dcefe7-61ee-4ce3-a9ec-61d6044ac1c3", "record_id": "flaws_cloudtrail:0000003:98dcefe7-61ee-4ce3-a9ec-61d6044ac1c3", "row_index": 3, "timestamp": "2019-06-20T21:29:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98dcefe7-61ee-4ce3-a9ec-61d6044ac1c3", "eventTime": "2019-06-20T21:29:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4140e065-94c7-4d18-bfdb-84c346758be5", "record_id": "flaws_cloudtrail:0000004:4140e065-94c7-4d18-bfdb-84c346758be5", "row_index": 4, "timestamp": "2019-06-20T21:29:49Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4140e065-94c7-4d18-bfdb-84c346758be5", "eventTime": "2019-06-20T21:29:49Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1942a04c-b47a-499f-aae0-de9790f08c6f", "record_id": "flaws_cloudtrail:0000005:1942a04c-b47a-499f-aae0-de9790f08c6f", "row_index": 5, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1942a04c-b47a-499f-aae0-de9790f08c6f", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96342d7-fe7a-479b-9b3f-231466dd83e5", "record_id": "flaws_cloudtrail:0000006:96342d7-fe7a-479b-9b3f-231466dd83e5", "row_index": 6, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96342d7-fe7a-479b-9b3f-231466dd83e5", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f60130e6-02a1-41bc-b1e3-746afe0da3d8", "record_id": "flaws_cloudtrail:0000007:f60130e6-02a1-41bc-b1e3-746afe0da3d8", "row_index": 7, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f60130e6-02a1-41bc-b1e3-746afe0da3d8", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "record_id": "flaws_cloudtrail:0000008:8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "row_index": 8, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aec226b-c386-45c2-b23e-83016a83ba2b", "record_id": "flaws_cloudtrail:0000009:7aec226b-c386-45c2-b23e-83016a83ba2b", "row_index": 9, "timestamp": "2019-06-20T21:29:50Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aec226b-c386-45c2-b23e-83016a83ba2b", "eventTime": "2019-06-20T21:29:50Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40273d24-35b2-4b8a-9918-8af5cf754c22", "record_id": "flaws_cloudtrail:0000010:40273d24-35b2-4b8a-9918-8af5cf754c22", "row_index": 10, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40273d24-35b2-4b8a-9918-8af5cf754c22", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1942a04c-b47a-499f-aae0-de9790f08c6f", "record_id": "flaws_cloudtrail:0000011:1942a04c-b47a-499f-aae0-de9790f08c6f", "row_index": 11, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1942a04c-b47a-499f-aae0-de9790f08c6f", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96342d7-fe7a-479b-9b3f-231466dd83e5", "record_id": "flaws_cloudtrail:0000012:96342d7-fe7a-479b-9b3f-231466dd83e5", "row_index": 12, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96342d7-fe7a-479b-9b3f-231466dd83e5", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f60130e6-02a1-41bc-b1e3-746afe0da3d8", "record_id": "flaws_cloudtrail:0000013:f60130e6-02a1-41bc-b1e3-746afe0da3d8", "row_index": 13, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f60130e6-02a1-41bc-b1e3-746afe0da3d8", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "record_id": "flaws_cloudtrail:0000014:8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "row_index": 14, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9f3ba1-eed4-4557-a9de-aad2133cc20d", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aec226b-c386-45c2-b23e-83016a83ba2b", "record_id": "flaws_cloudtrail:0000015:7aec226b-c386-45c2-b23e-83016a83ba2b", "row_index": 15, "timestamp": "2019-06-20T21:29:50Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aec226b-c386-45c2-b23e-83016a83ba2b", "eventTime": "2019-06-20T21:29:50Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40273d24-35b2-4b8a-9918-8af5cf754c22", "record_id": "flaws_cloudtrail:0000016:40273d24-35b2-4b8a-9918-8af5cf754c22", "row_index": 16, "timestamp": "2019-06-20T21:29:50Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40273d24-35b2-4b8a-9918-8af5cf754c22", "eventTime": "2019-06-20T21:29:50Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "record_id": "flaws_cloudtrail:0000017:4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "row_index": 17, "timestamp": "2019-06-20T21:29:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "eventTime": "2019-06-20T21:29:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d355903fb-2513-4d8d-9eb5-7c825297b988f", "record_id": "flaws_cloudtrail:0000018:d355903fb-2513-4d8d-9eb5-7c825297b988f", "row_index": 18, "timestamp": "2019-06-20T21:29:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d355903fb-2513-4d8d-9eb5-7c825297b988f", "eventTime": "2019-06-20T21:29:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "record_id": "flaws_cloudtrail:0000019:4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "row_index": 19, "timestamp": "2019-06-20T21:29:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4079dfe5-26d4-4890-b7c0-cc5cbb925ab1", "eventTime": "2019-06-20T21:29:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d355903fb-2513-4d8d-9eb5-7c825297b988f", "record_id": "flaws_cloudtrail:0000020:d355903fb-2513-4d8d-9eb5-7c825297b988f", "row_index": 20, "timestamp": "2019-06-20T21:29:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d355903fb-2513-4d8d-9eb5-7c825297b988f", "eventTime": "2019-06-20T21:29:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "record_id": "flaws_cloudtrail:0000021:d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "row_index": 21, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0dd94b-4692-4043-b68f-d5231a328ce4", "record_id": "flaws_cloudtrail:0000022:0c0dd94b-4692-4043-b68f-d5231a328ce4", "row_index": 22, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0dd94b-4692-4043-b68f-d5231a328ce4", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "record_id": "flaws_cloudtrail:0000023:d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "row_index": 23, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d071991-d6f1-431d-b038-6ac167921f76", "record_id": "flaws_cloudtrail:0000024:8d071991-d6f1-431d-b038-6ac167921f76", "row_index": 24, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d071991-d6f1-431d-b038-6ac167921f76", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5879c6b-e62f-4b36-9e48-373492921997", "record_id": "flaws_cloudtrail:0000025:d5879c6b-e62f-4b36-9e48-373492921997", "row_index": 25, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5879c6b-e62f-4b36-9e48-373492921997", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "record_id": "flaws_cloudtrail:0000026:a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "row_index": 26, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "record_id": "flaws_cloudtrail:0000027:d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "row_index": 27, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d371dc7d-fc85-4038-b7ec-0e4e19e18f47", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0dd94b-4692-4043-b68f-d5231a328ce4", "record_id": "flaws_cloudtrail:0000028:0c0dd94b-4692-4043-b68f-d5231a328ce4", "row_index": 28, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0dd94b-4692-4043-b68f-d5231a328ce4", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "record_id": "flaws_cloudtrail:0000029:d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "row_index": 29, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89baf6e-9b9d-453c-b4fe-00678ebf0f4a", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d071991-d6f1-431d-b038-6ac167921f76", "record_id": "flaws_cloudtrail:0000030:8d071991-d6f1-431d-b038-6ac167921f76", "row_index": 30, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d071991-d6f1-431d-b038-6ac167921f76", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5879c6b-e62f-4b36-9e48-373492921997", "record_id": "flaws_cloudtrail:0000031:d5879c6b-e62f-4b36-9e48-373492921997", "row_index": 31, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5879c6b-e62f-4b36-9e48-373492921997", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "record_id": "flaws_cloudtrail:0000032:a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "row_index": 32, "timestamp": "2019-06-20T21:30:28Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6f017a8-559c-4b80-ba1a-79d2b358bd7a", "eventTime": "2019-06-20T21:30:28Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d6d71a3-7644-42be-aff8-56652f6a022f", "record_id": "flaws_cloudtrail:0000033:9d6d71a3-7644-42be-aff8-56652f6a022f", "row_index": 33, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d6d71a3-7644-42be-aff8-56652f6a022f", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957441-08cf-4546-89e8-d984d3bf81f1", "record_id": "flaws_cloudtrail:0000034:957441-08cf-4546-89e8-d984d3bf81f1", "row_index": 34, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957441-08cf-4546-89e8-d984d3bf81f1", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "record_id": "flaws_cloudtrail:0000035:f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "row_index": 35, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "record_id": "flaws_cloudtrail:0000036:e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "row_index": 36, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "record_id": "flaws_cloudtrail:0000037:9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "row_index": 37, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd75e2d1-158c-4ee7-90b9-30e23b339803b", "record_id": "flaws_cloudtrail:0000038:fd75e2d1-158c-4ee7-90b9-30e23b339803b", "row_index": 38, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd75e2d1-158c-4ee7-90b9-30e23b339803b", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d6d71a3-7644-42be-aff8-56652f6a022f", "record_id": "flaws_cloudtrail:0000039:9d6d71a3-7644-42be-aff8-56652f6a022f", "row_index": 39, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d6d71a3-7644-42be-aff8-56652f6a022f", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957441-08cf-4546-89e8-d984d3bf81f1", "record_id": "flaws_cloudtrail:0000040:957441-08cf-4546-89e8-d984d3bf81f1", "row_index": 40, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957441-08cf-4546-89e8-d984d3bf81f1", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "record_id": "flaws_cloudtrail:0000041:f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "row_index": 41, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b59f30-5222-4bc8-bc6d-dd8d73562de5", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "record_id": "flaws_cloudtrail:0000042:e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "row_index": 42, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34f0d28-76b4-46cf-a669-bb4c1a3d1d58", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "record_id": "flaws_cloudtrail:0000043:9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "row_index": 43, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9808db4a-803d-45e8-b8a8-d3c2c0a2c7f2", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd75e2d1-158c-4ee7-90b9-30e23b339803b", "record_id": "flaws_cloudtrail:0000044:fd75e2d1-158c-4ee7-90b9-30e23b339803b", "row_index": 44, "timestamp": "2019-06-20T21:30:29Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd75e2d1-158c-4ee7-90b9-30e23b339803b", "eventTime": "2019-06-20T21:30:29Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cec1218-385f-4951-ac65-3415a935d10e", "record_id": "flaws_cloudtrail:0000045:8cec1218-385f-4951-ac65-3415a935d10e", "row_index": 45, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cec1218-385f-4951-ac65-3415a935d10e", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab468339d-012b-4387-92a6-b22d34afee31", "record_id": "flaws_cloudtrail:0000046:ab468339d-012b-4387-92a6-b22d34afee31", "row_index": 46, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab468339d-012b-4387-92a6-b22d34afee31", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "984401e-5b52-4622-9aee-2ef7b0b4e2e7", "record_id": "flaws_cloudtrail:0000047:984401e-5b52-4622-9aee-2ef7b0b4e2e7", "row_index": 47, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "984401e-5b52-4622-9aee-2ef7b0b4e2e7", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0feefa35-be67-4014-9b10-6fa56fc4773a", "record_id": "flaws_cloudtrail:0000048:0feefa35-be67-4014-9b10-6fa56fc4773a", "row_index": 48, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0feefa35-be67-4014-9b10-6fa56fc4773a", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16e35c5-2b04-4f30-896a-ff2982be23eb", "record_id": "flaws_cloudtrail:0000049:f16e35c5-2b04-4f30-896a-ff2982be23eb", "row_index": 49, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16e35c5-2b04-4f30-896a-ff2982be23eb", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7206b2b5-cf30-4ecc-99b6-8db17d566f22", "record_id": "flaws_cloudtrail:0000050:7206b2b5-cf30-4ecc-99b6-8db17d566f22", "row_index": 50, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7206b2b5-cf30-4ecc-99b6-8db17d566f22", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59fddb2b-47cc-461a-9c96-2c574cee3ba6", "record_id": "flaws_cloudtrail:0000051:59fddb2b-47cc-461a-9c96-2c574cee3ba6", "row_index": 51, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59fddb2b-47cc-461a-9c96-2c574cee3ba6", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cec1218-385f-4951-ac65-3415a935d10e", "record_id": "flaws_cloudtrail:0000052:8cec1218-385f-4951-ac65-3415a935d10e", "row_index": 52, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cec1218-385f-4951-ac65-3415a935d10e", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab468339d-012b-4387-92a6-b22d34afee31", "record_id": "flaws_cloudtrail:0000053:ab468339d-012b-4387-92a6-b22d34afee31", "row_index": 53, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab468339d-012b-4387-92a6-b22d34afee31", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "984401e-5b52-4622-9aee-2ef7b0b4e2e7", "record_id": "flaws_cloudtrail:0000054:984401e-5b52-4622-9aee-2ef7b0b4e2e7", "row_index": 54, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "984401e-5b52-4622-9aee-2ef7b0b4e2e7", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0feefa35-be67-4014-9b10-6fa56fc4773a", "record_id": "flaws_cloudtrail:0000055:0feefa35-be67-4014-9b10-6fa56fc4773a", "row_index": 55, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0feefa35-be67-4014-9b10-6fa56fc4773a", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16e35c5-2b04-4f30-896a-ff2982be23eb", "record_id": "flaws_cloudtrail:0000056:f16e35c5-2b04-4f30-896a-ff2982be23eb", "row_index": 56, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16e35c5-2b04-4f30-896a-ff2982be23eb", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7206b2b5-cf30-4ecc-99b6-8db17d566f22", "record_id": "flaws_cloudtrail:0000057:7206b2b5-cf30-4ecc-99b6-8db17d566f22", "row_index": 57, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7206b2b5-cf30-4ecc-99b6-8db17d566f22", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59fddb2b-47cc-461a-9c96-2c574cee3ba6", "record_id": "flaws_cloudtrail:0000058:59fddb2b-47cc-461a-9c96-2c574cee3ba6", "row_index": 58, "timestamp": "2019-06-20T21:30:30Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59fddb2b-47cc-461a-9c96-2c574cee3ba6", "eventTime": "2019-06-20T21:30:30Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9493e6b2-1b15-4feb-854b-8100963c5271", "record_id": "flaws_cloudtrail:0000059:9493e6b2-1b15-4feb-854b-8100963c5271", "row_index": 59, "timestamp": "2019-06-20T21:30:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9493e6b2-1b15-4feb-854b-8100963c5271", "eventTime": "2019-06-20T21:30:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2014d411-fb68-4b1c-afd5-4a645a8035cc", "record_id": "flaws_cloudtrail:0000060:2014d411-fb68-4b1c-afd5-4a645a8035cc", "row_index": 60, "timestamp": "2019-06-20T21:30:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2014d411-fb68-4b1c-afd5-4a645a8035cc", "eventTime": "2019-06-20T21:30:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f27980-c78b-49a0-8624-28843f12ab67", "record_id": "flaws_cloudtrail:0000061:8f27980-c78b-49a0-8624-28843f12ab67", "row_index": 61, "timestamp": "2019-06-20T21:30:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f27980-c78b-49a0-8624-28843f12ab67", "eventTime": "2019-06-20T21:30:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389300a7a-8150-46c8-9097-29257ce7", "record_id": "flaws_cloudtrail:0000062:389300a7a-8150-46c8-9097-29257ce7", "row_index": 62, "timestamp": "2019-06-20T21:30:31Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389300a7a-8150-46c8-9097-29257ce7", "eventTime": "2019-06-20T21:30:31Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9493e6b2-1b15-4feb-854b-8100963c5271", "record_id": "flaws_cloudtrail:0000063:9493e6b2-1b15-4feb-854b-8100963c5271", "row_index": 63, "timestamp": "2019-06-20T21:30:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9493e6b2-1b15-4feb-854b-8100963c5271", "eventTime": "2019-06-20T21:30:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2014d411-fb68-4b1c-afd5-4a645a8035cc", "record_id": "flaws_cloudtrail:0000064:2014d411-fb68-4b1c-afd5-4a645a8035cc", "row_index": 64, "timestamp": "2019-06-20T21:30:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2014d411-fb68-4b1c-afd5-4a645a8035cc", "eventTime": "2019-06-20T21:30:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f27980-c78b-49a0-8624-28843f12ab67", "record_id": "flaws_cloudtrail:0000065:8f27980-c78b-49a0-8624-28843f12ab67", "row_index": 65, "timestamp": "2019-06-20T21:30:31Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f27980-c78b-49a0-8624-28843f12ab67", "eventTime": "2019-06-20T21:30:31Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "389300a7a-8150-46c8-9097-29257ce7", "record_id": "flaws_cloudtrail:0000066:389300a7a-8150-46c8-9097-29257ce7", "row_index": 66, "timestamp": "2019-06-20T21:30:31Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "389300a7a-8150-46c8-9097-29257ce7", "eventTime": "2019-06-20T21:30:31Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2f5a9d5-b55b-4804-a881-f36e6aff635f", "record_id": "flaws_cloudtrail:0000067:e2f5a9d5-b55b-4804-a881-f36e6aff635f", "row_index": 67, "timestamp": "2019-06-20T21:30:44Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2f5a9d5-b55b-4804-a881-f36e6aff635f", "eventTime": "2019-06-20T21:30:44Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2188e05c-64b7-48c8-a524-779257a0019e4", "record_id": "flaws_cloudtrail:0000068:2188e05c-64b7-48c8-a524-779257a0019e4", "row_index": 68, "timestamp": "2019-06-20T21:30:44Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2188e05c-64b7-48c8-a524-779257a0019e4", "eventTime": "2019-06-20T21:30:44Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2f5a9d5-b55b-4804-a881-f36e6aff635f", "record_id": "flaws_cloudtrail:0000069:e2f5a9d5-b55b-4804-a881-f36e6aff635f", "row_index": 69, "timestamp": "2019-06-20T21:30:44Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2f5a9d5-b55b-4804-a881-f36e6aff635f", "eventTime": "2019-06-20T21:30:44Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2188e05c-64b7-48c8-a524-779257a0019e4", "record_id": "flaws_cloudtrail:0000070:2188e05c-64b7-48c8-a524-779257a0019e4", "row_index": 70, "timestamp": "2019-06-20T21:30:44Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2188e05c-64b7-48c8-a524-779257a0019e4", "eventTime": "2019-06-20T21:30:44Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5282b7ea-6fd4-46a9-8135-27b98c9429b5", "record_id": "flaws_cloudtrail:0000071:5282b7ea-6fd4-46a9-8135-27b98c9429b5", "row_index": 71, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5282b7ea-6fd4-46a9-8135-27b98c9429b5", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2ac3e44-a852-43c2-a420-50bf307ac47c", "record_id": "flaws_cloudtrail:0000072:f2ac3e44-a852-43c2-a420-50bf307ac47c", "row_index": 72, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2ac3e44-a852-43c2-a420-50bf307ac47c", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6edd8692-1e08-4f24-a0f5-2cb26067f7d", "record_id": "flaws_cloudtrail:0000073:6edd8692-1e08-4f24-a0f5-2cb26067f7d", "row_index": 73, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6edd8692-1e08-4f24-a0f5-2cb26067f7d", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85acdfe7-af2e-4151-ab2e-100973614fa6", "record_id": "flaws_cloudtrail:0000074:85acdfe7-af2e-4151-ab2e-100973614fa6", "row_index": 74, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85acdfe7-af2e-4151-ab2e-100973614fa6", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48af218a-3d95-4925-acd5-1ab3a726d7bb", "record_id": "flaws_cloudtrail:0000075:48af218a-3d95-4925-acd5-1ab3a726d7bb", "row_index": 75, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48af218a-3d95-4925-acd5-1ab3a726d7bb", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77bbfc55-ac27-404d-9777-5eaa781dd9d5", "record_id": "flaws_cloudtrail:0000076:77bbfc55-ac27-404d-9777-5eaa781dd9d5", "row_index": 76, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77bbfc55-ac27-404d-9777-5eaa781dd9d5", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5282b7ea-6fd4-46a9-8135-27b98c9429b5", "record_id": "flaws_cloudtrail:0000077:5282b7ea-6fd4-46a9-8135-27b98c9429b5", "row_index": 77, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5282b7ea-6fd4-46a9-8135-27b98c9429b5", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2ac3e44-a852-43c2-a420-50bf307ac47c", "record_id": "flaws_cloudtrail:0000078:f2ac3e44-a852-43c2-a420-50bf307ac47c", "row_index": 78, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2ac3e44-a852-43c2-a420-50bf307ac47c", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6edd8692-1e08-4f24-a0f5-2cb26067f7d", "record_id": "flaws_cloudtrail:0000079:6edd8692-1e08-4f24-a0f5-2cb26067f7d", "row_index": 79, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6edd8692-1e08-4f24-a0f5-2cb26067f7d", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85acdfe7-af2e-4151-ab2e-100973614fa6", "record_id": "flaws_cloudtrail:0000080:85acdfe7-af2e-4151-ab2e-100973614fa6", "row_index": 80, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85acdfe7-af2e-4151-ab2e-100973614fa6", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48af218a-3d95-4925-acd5-1ab3a726d7bb", "record_id": "flaws_cloudtrail:0000081:48af218a-3d95-4925-acd5-1ab3a726d7bb", "row_index": 81, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48af218a-3d95-4925-acd5-1ab3a726d7bb", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77bbfc55-ac27-404d-9777-5eaa781dd9d5", "record_id": "flaws_cloudtrail:0000082:77bbfc55-ac27-404d-9777-5eaa781dd9d5", "row_index": 82, "timestamp": "2019-06-20T21:30:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77bbfc55-ac27-404d-9777-5eaa781dd9d5", "eventTime": "2019-06-20T21:30:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f807e802-30d0-4030-839d-c36e4c806b24", "record_id": "flaws_cloudtrail:0000083:f807e802-30d0-4030-839d-c36e4c806b24", "row_index": 83, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f807e802-30d0-4030-839d-c36e4c806b24", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4af4f92-729a-4e83-8186-8e4b6b67f316", "record_id": "flaws_cloudtrail:0000084:d4af4f92-729a-4e83-8186-8e4b6b67f316", "row_index": 84, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4af4f92-729a-4e83-8186-8e4b6b67f316", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f096c0fe-a3e8-4acb-908b-4841de5afdd9", "record_id": "flaws_cloudtrail:0000085:f096c0fe-a3e8-4acb-908b-4841de5afdd9", "row_index": 85, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f096c0fe-a3e8-4acb-908b-4841de5afdd9", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d274cb40-9861-4529-8c70-56d3cee60a96", "record_id": "flaws_cloudtrail:0000086:d274cb40-9861-4529-8c70-56d3cee60a96", "row_index": 86, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d274cb40-9861-4529-8c70-56d3cee60a96", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d43b659-2da0-48da-b293-4abfad68cc2d", "record_id": "flaws_cloudtrail:0000087:3d43b659-2da0-48da-b293-4abfad68cc2d", "row_index": 87, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d43b659-2da0-48da-b293-4abfad68cc2d", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f807e802-30d0-4030-839d-c36e4c806b24", "record_id": "flaws_cloudtrail:0000088:f807e802-30d0-4030-839d-c36e4c806b24", "row_index": 88, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f807e802-30d0-4030-839d-c36e4c806b24", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4af4f92-729a-4e83-8186-8e4b6b67f316", "record_id": "flaws_cloudtrail:0000089:d4af4f92-729a-4e83-8186-8e4b6b67f316", "row_index": 89, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4af4f92-729a-4e83-8186-8e4b6b67f316", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f096c0fe-a3e8-4acb-908b-4841de5afdd9", "record_id": "flaws_cloudtrail:0000090:f096c0fe-a3e8-4acb-908b-4841de5afdd9", "row_index": 90, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f096c0fe-a3e8-4acb-908b-4841de5afdd9", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d274cb40-9861-4529-8c70-56d3cee60a96", "record_id": "flaws_cloudtrail:0000091:d274cb40-9861-4529-8c70-56d3cee60a96", "row_index": 91, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d274cb40-9861-4529-8c70-56d3cee60a96", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d43b659-2da0-48da-b293-4abfad68cc2d", "record_id": "flaws_cloudtrail:0000092:3d43b659-2da0-48da-b293-4abfad68cc2d", "row_index": 92, "timestamp": "2019-06-20T21:30:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d43b659-2da0-48da-b293-4abfad68cc2d", "eventTime": "2019-06-20T21:30:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37bdb449-17c4-4caa-a464-bfe186c03c57", "record_id": "flaws_cloudtrail:0000093:37bdb449-17c4-4caa-a464-bfe186c03c57", "row_index": 93, "timestamp": "2019-06-20T21:30:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37bdb449-17c4-4caa-a464-bfe186c03c57", "eventTime": "2019-06-20T21:30:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37bdb449-17c4-4caa-a464-bfe186c03c57", "record_id": "flaws_cloudtrail:0000094:37bdb449-17c4-4caa-a464-bfe186c03c57", "row_index": 94, "timestamp": "2019-06-20T21:30:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37bdb449-17c4-4caa-a464-bfe186c03c57", "eventTime": "2019-06-20T21:30:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1570ae2e-42e8-4717-aff8-098263b233", "record_id": "flaws_cloudtrail:0000095:1570ae2e-42e8-4717-aff8-098263b233", "row_index": 95, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1570ae2e-42e8-4717-aff8-098263b233", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34711a1-9082-4934-8f8e-17c98dafa7fe", "record_id": "flaws_cloudtrail:0000096:e34711a1-9082-4934-8f8e-17c98dafa7fe", "row_index": 96, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34711a1-9082-4934-8f8e-17c98dafa7fe", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "record_id": "flaws_cloudtrail:0000097:1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "row_index": 97, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c42da22c-b686-4a90-a873-b30485d68b", "record_id": "flaws_cloudtrail:0000098:c42da22c-b686-4a90-a873-b30485d68b", "row_index": 98, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c42da22c-b686-4a90-a873-b30485d68b", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1570ae2e-42e8-4717-aff8-098263b233", "record_id": "flaws_cloudtrail:0000099:1570ae2e-42e8-4717-aff8-098263b233", "row_index": 99, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1570ae2e-42e8-4717-aff8-098263b233", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34711a1-9082-4934-8f8e-17c98dafa7fe", "record_id": "flaws_cloudtrail:0000100:e34711a1-9082-4934-8f8e-17c98dafa7fe", "row_index": 100, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34711a1-9082-4934-8f8e-17c98dafa7fe", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "record_id": "flaws_cloudtrail:0000101:1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "row_index": 101, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1422ed00-d5b3-4bc9-9d9d-75132d01aaa7", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c42da22c-b686-4a90-a873-b30485d68b", "record_id": "flaws_cloudtrail:0000102:c42da22c-b686-4a90-a873-b30485d68b", "row_index": 102, "timestamp": "2019-06-20T21:31:22Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c42da22c-b686-4a90-a873-b30485d68b", "eventTime": "2019-06-20T21:31:22Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c543f299-81b1-4cdc-af85-18c2cb60e667", "record_id": "flaws_cloudtrail:0000103:c543f299-81b1-4cdc-af85-18c2cb60e667", "row_index": 103, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c543f299-81b1-4cdc-af85-18c2cb60e667", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d534fe27-271e-409b-bc4b-4f62eac7687d", "record_id": "flaws_cloudtrail:0000104:d534fe27-271e-409b-bc4b-4f62eac7687d", "row_index": 104, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d534fe27-271e-409b-bc4b-4f62eac7687d", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "record_id": "flaws_cloudtrail:0000105:ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "row_index": 105, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae679b9b-10a5-49ad-9cc8-f74484fef", "record_id": "flaws_cloudtrail:0000106:ae679b9b-10a5-49ad-9cc8-f74484fef", "row_index": 106, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae679b9b-10a5-49ad-9cc8-f74484fef", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "record_id": "flaws_cloudtrail:0000107:3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "row_index": 107, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c543f299-81b1-4cdc-af85-18c2cb60e667", "record_id": "flaws_cloudtrail:0000108:c543f299-81b1-4cdc-af85-18c2cb60e667", "row_index": 108, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c543f299-81b1-4cdc-af85-18c2cb60e667", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d534fe27-271e-409b-bc4b-4f62eac7687d", "record_id": "flaws_cloudtrail:0000109:d534fe27-271e-409b-bc4b-4f62eac7687d", "row_index": 109, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d534fe27-271e-409b-bc4b-4f62eac7687d", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "record_id": "flaws_cloudtrail:0000110:ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "row_index": 110, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddbc6ba6-3c4a-4e19-bd38-ba2f357d15d2", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae679b9b-10a5-49ad-9cc8-f74484fef", "record_id": "flaws_cloudtrail:0000111:ae679b9b-10a5-49ad-9cc8-f74484fef", "row_index": 111, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae679b9b-10a5-49ad-9cc8-f74484fef", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "record_id": "flaws_cloudtrail:0000112:3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "row_index": 112, "timestamp": "2019-06-20T21:31:23Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bb232f5-7084-4a6c-ae2f-684f14af5ac8", "eventTime": "2019-06-20T21:31:23Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e149dceb-ece1-40bc-a441-a98a807fc424", "record_id": "flaws_cloudtrail:0000113:e149dceb-ece1-40bc-a441-a98a807fc424", "row_index": 113, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e149dceb-ece1-40bc-a441-a98a807fc424", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3fff127-84ac-4d42-8318-20e3a547623", "record_id": "flaws_cloudtrail:0000114:e3fff127-84ac-4d42-8318-20e3a547623", "row_index": 114, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1148, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3fff127-84ac-4d42-8318-20e3a547623", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227632e45-02ae-4aa1-b077-1a720e4d4149", "record_id": "flaws_cloudtrail:0000115:227632e45-02ae-4aa1-b077-1a720e4d4149", "row_index": 115, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227632e45-02ae-4aa1-b077-1a720e4d4149", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10db980f-6dc0-4d82-a29f-9ab16dee746e", "record_id": "flaws_cloudtrail:0000116:10db980f-6dc0-4d82-a29f-9ab16dee746e", "row_index": 116, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10db980f-6dc0-4d82-a29f-9ab16dee746e", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308604ec-42ff-4eee-8b51-cee61d6e1ac8", "record_id": "flaws_cloudtrail:0000117:308604ec-42ff-4eee-8b51-cee61d6e1ac8", "row_index": 117, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308604ec-42ff-4eee-8b51-cee61d6e1ac8", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e149dceb-ece1-40bc-a441-a98a807fc424", "record_id": "flaws_cloudtrail:0000118:e149dceb-ece1-40bc-a441-a98a807fc424", "row_index": 118, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e149dceb-ece1-40bc-a441-a98a807fc424", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3fff127-84ac-4d42-8318-20e3a547623", "record_id": "flaws_cloudtrail:0000119:e3fff127-84ac-4d42-8318-20e3a547623", "row_index": 119, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1148, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3fff127-84ac-4d42-8318-20e3a547623", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227632e45-02ae-4aa1-b077-1a720e4d4149", "record_id": "flaws_cloudtrail:0000120:227632e45-02ae-4aa1-b077-1a720e4d4149", "row_index": 120, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227632e45-02ae-4aa1-b077-1a720e4d4149", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10db980f-6dc0-4d82-a29f-9ab16dee746e", "record_id": "flaws_cloudtrail:0000121:10db980f-6dc0-4d82-a29f-9ab16dee746e", "row_index": 121, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10db980f-6dc0-4d82-a29f-9ab16dee746e", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "308604ec-42ff-4eee-8b51-cee61d6e1ac8", "record_id": "flaws_cloudtrail:0000122:308604ec-42ff-4eee-8b51-cee61d6e1ac8", "row_index": 122, "timestamp": "2019-06-20T21:31:24Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "308604ec-42ff-4eee-8b51-cee61d6e1ac8", "eventTime": "2019-06-20T21:31:24Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f64f5ee-6573-45eb-8f92-293451ebbb58b", "record_id": "flaws_cloudtrail:0000123:0f64f5ee-6573-45eb-8f92-293451ebbb58b", "row_index": 123, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f64f5ee-6573-45eb-8f92-293451ebbb58b", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74740ba-55fe-4e43-9b59-9584bc7378cf", "record_id": "flaws_cloudtrail:0000124:a74740ba-55fe-4e43-9b59-9584bc7378cf", "row_index": 124, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74740ba-55fe-4e43-9b59-9584bc7378cf", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "record_id": "flaws_cloudtrail:0000125:1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "row_index": 125, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3037afee-c81a-45ea-ae36-df6298cff063", "record_id": "flaws_cloudtrail:0000126:3037afee-c81a-45ea-ae36-df6298cff063", "row_index": 126, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3037afee-c81a-45ea-ae36-df6298cff063", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "record_id": "flaws_cloudtrail:0000127:da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "row_index": 127, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63763-133d-4007-9522-b02ddfd544388", "record_id": "flaws_cloudtrail:0000128:63763-133d-4007-9522-b02ddfd544388", "row_index": 128, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63763-133d-4007-9522-b02ddfd544388", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f64f5ee-6573-45eb-8f92-293451ebbb58b", "record_id": "flaws_cloudtrail:0000129:0f64f5ee-6573-45eb-8f92-293451ebbb58b", "row_index": 129, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f64f5ee-6573-45eb-8f92-293451ebbb58b", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74740ba-55fe-4e43-9b59-9584bc7378cf", "record_id": "flaws_cloudtrail:0000130:a74740ba-55fe-4e43-9b59-9584bc7378cf", "row_index": 130, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74740ba-55fe-4e43-9b59-9584bc7378cf", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "record_id": "flaws_cloudtrail:0000131:1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "row_index": 131, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec7ccd0-9cbc-4c3e-ad4f-c87abf574576", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3037afee-c81a-45ea-ae36-df6298cff063", "record_id": "flaws_cloudtrail:0000132:3037afee-c81a-45ea-ae36-df6298cff063", "row_index": 132, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3037afee-c81a-45ea-ae36-df6298cff063", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "record_id": "flaws_cloudtrail:0000133:da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "row_index": 133, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da3c248c-eccb-43ca-abc5-4c0edb2ccdb5", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63763-133d-4007-9522-b02ddfd544388", "record_id": "flaws_cloudtrail:0000134:63763-133d-4007-9522-b02ddfd544388", "row_index": 134, "timestamp": "2019-06-20T21:31:25Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63763-133d-4007-9522-b02ddfd544388", "eventTime": "2019-06-20T21:31:25Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07d0b7e4-f106-409a-a33b-2bd2861dea07", "record_id": "flaws_cloudtrail:0000135:07d0b7e4-f106-409a-a33b-2bd2861dea07", "row_index": 135, "timestamp": "2019-06-20T21:31:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07d0b7e4-f106-409a-a33b-2bd2861dea07", "eventTime": "2019-06-20T21:31:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7e9983b-c0d7-4939-8e5c-f0476b41f497", "record_id": "flaws_cloudtrail:0000136:a7e9983b-c0d7-4939-8e5c-f0476b41f497", "row_index": 136, "timestamp": "2019-06-20T21:31:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7e9983b-c0d7-4939-8e5c-f0476b41f497", "eventTime": "2019-06-20T21:31:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7b273773-f75a-476e-8693-a55dec4577d8", "record_id": "flaws_cloudtrail:0000137:a7b273773-f75a-476e-8693-a55dec4577d8", "row_index": 137, "timestamp": "2019-06-20T21:31:26Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7b273773-f75a-476e-8693-a55dec4577d8", "eventTime": "2019-06-20T21:31:26Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07d0b7e4-f106-409a-a33b-2bd2861dea07", "record_id": "flaws_cloudtrail:0000138:07d0b7e4-f106-409a-a33b-2bd2861dea07", "row_index": 138, "timestamp": "2019-06-20T21:31:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07d0b7e4-f106-409a-a33b-2bd2861dea07", "eventTime": "2019-06-20T21:31:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7e9983b-c0d7-4939-8e5c-f0476b41f497", "record_id": "flaws_cloudtrail:0000139:a7e9983b-c0d7-4939-8e5c-f0476b41f497", "row_index": 139, "timestamp": "2019-06-20T21:31:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7e9983b-c0d7-4939-8e5c-f0476b41f497", "eventTime": "2019-06-20T21:31:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7b273773-f75a-476e-8693-a55dec4577d8", "record_id": "flaws_cloudtrail:0000140:a7b273773-f75a-476e-8693-a55dec4577d8", "row_index": 140, "timestamp": "2019-06-20T21:31:26Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7b273773-f75a-476e-8693-a55dec4577d8", "eventTime": "2019-06-20T21:31:26Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "697ec553-de26-47f6-94b2-32ed21fa3521", "record_id": "flaws_cloudtrail:0000141:697ec553-de26-47f6-94b2-32ed21fa3521", "row_index": 141, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "697ec553-de26-47f6-94b2-32ed21fa3521", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95eca6a5-33f5-43a6-a59a-bfd677263f3f", "record_id": "flaws_cloudtrail:0000142:95eca6a5-33f5-43a6-a59a-bfd677263f3f", "row_index": 142, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95eca6a5-33f5-43a6-a59a-bfd677263f3f", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "record_id": "flaws_cloudtrail:0000143:5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "row_index": 143, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cc150e7-4502-4f98-abf1-97b59f1d7764", "record_id": "flaws_cloudtrail:0000144:3cc150e7-4502-4f98-abf1-97b59f1d7764", "row_index": 144, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cc150e7-4502-4f98-abf1-97b59f1d7764", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "697ec553-de26-47f6-94b2-32ed21fa3521", "record_id": "flaws_cloudtrail:0000145:697ec553-de26-47f6-94b2-32ed21fa3521", "row_index": 145, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "697ec553-de26-47f6-94b2-32ed21fa3521", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95eca6a5-33f5-43a6-a59a-bfd677263f3f", "record_id": "flaws_cloudtrail:0000146:95eca6a5-33f5-43a6-a59a-bfd677263f3f", "row_index": 146, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95eca6a5-33f5-43a6-a59a-bfd677263f3f", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "record_id": "flaws_cloudtrail:0000147:5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "row_index": 147, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bedd8d8-bbf0-4e5b-9263-83e58d096e7f", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cc150e7-4502-4f98-abf1-97b59f1d7764", "record_id": "flaws_cloudtrail:0000148:3cc150e7-4502-4f98-abf1-97b59f1d7764", "row_index": 148, "timestamp": "2019-06-20T21:31:34Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cc150e7-4502-4f98-abf1-97b59f1d7764", "eventTime": "2019-06-20T21:31:34Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af9517c5-9260-47ba-ad6e-5eaa368c6644", "record_id": "flaws_cloudtrail:0000149:af9517c5-9260-47ba-ad6e-5eaa368c6644", "row_index": 149, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af9517c5-9260-47ba-ad6e-5eaa368c6644", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "record_id": "flaws_cloudtrail:0000150:91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "row_index": 150, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "record_id": "flaws_cloudtrail:0000151:b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "row_index": 151, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def82d36-95e4-4c44-8784-a955e20c75ec", "record_id": "flaws_cloudtrail:0000152:def82d36-95e4-4c44-8784-a955e20c75ec", "row_index": 152, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def82d36-95e4-4c44-8784-a955e20c75ec", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c68404f1-00d1-4314-a450-d0091ef34f9d", "record_id": "flaws_cloudtrail:0000153:c68404f1-00d1-4314-a450-d0091ef34f9d", "row_index": 153, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c68404f1-00d1-4314-a450-d0091ef34f9d", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af9517c5-9260-47ba-ad6e-5eaa368c6644", "record_id": "flaws_cloudtrail:0000154:af9517c5-9260-47ba-ad6e-5eaa368c6644", "row_index": 154, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af9517c5-9260-47ba-ad6e-5eaa368c6644", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "record_id": "flaws_cloudtrail:0000155:91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "row_index": 155, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91abcd31-abfe-4ba8-9ae5-1fbf70f52ff3", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "record_id": "flaws_cloudtrail:0000156:b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "row_index": 156, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5618cd0-e55e-4578-bd7f-8ce7e6a3b6c8", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def82d36-95e4-4c44-8784-a955e20c75ec", "record_id": "flaws_cloudtrail:0000157:def82d36-95e4-4c44-8784-a955e20c75ec", "row_index": 157, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def82d36-95e4-4c44-8784-a955e20c75ec", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c68404f1-00d1-4314-a450-d0091ef34f9d", "record_id": "flaws_cloudtrail:0000158:c68404f1-00d1-4314-a450-d0091ef34f9d", "row_index": 158, "timestamp": "2019-06-20T21:31:35Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1147, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c68404f1-00d1-4314-a450-d0091ef34f9d", "eventTime": "2019-06-20T21:31:35Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006796fc-be8a-4725-94b7-fbf64dcf688c", "record_id": "flaws_cloudtrail:0000159:006796fc-be8a-4725-94b7-fbf64dcf688c", "row_index": 159, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006796fc-be8a-4725-94b7-fbf64dcf688c", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "record_id": "flaws_cloudtrail:0000160:1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "row_index": 160, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3de29a13-1548-43b7-9fe2-ec151fbb90de", "record_id": "flaws_cloudtrail:0000161:3de29a13-1548-43b7-9fe2-ec151fbb90de", "row_index": 161, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3de29a13-1548-43b7-9fe2-ec151fbb90de", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f1419c8-e90e-4276-884b-ae7017126f60", "record_id": "flaws_cloudtrail:0000162:0f1419c8-e90e-4276-884b-ae7017126f60", "row_index": 162, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f1419c8-e90e-4276-884b-ae7017126f60", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "667752-6c5d-4ce5-bed5-265d4847c413", "record_id": "flaws_cloudtrail:0000163:667752-6c5d-4ce5-bed5-265d4847c413", "row_index": 163, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "667752-6c5d-4ce5-bed5-265d4847c413", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c37c5b-4148-4888-9c25-8018f79ba493", "record_id": "flaws_cloudtrail:0000164:16c37c5b-4148-4888-9c25-8018f79ba493", "row_index": 164, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c37c5b-4148-4888-9c25-8018f79ba493", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de475ad8-4095-40aa-857f-0fa6c19a862a", "record_id": "flaws_cloudtrail:0000165:de475ad8-4095-40aa-857f-0fa6c19a862a", "row_index": 165, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de475ad8-4095-40aa-857f-0fa6c19a862a", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006796fc-be8a-4725-94b7-fbf64dcf688c", "record_id": "flaws_cloudtrail:0000166:006796fc-be8a-4725-94b7-fbf64dcf688c", "row_index": 166, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006796fc-be8a-4725-94b7-fbf64dcf688c", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "record_id": "flaws_cloudtrail:0000167:1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "row_index": 167, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bef0e42-f876-4eb3-b2fe-b6f2463ffffb", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3de29a13-1548-43b7-9fe2-ec151fbb90de", "record_id": "flaws_cloudtrail:0000168:3de29a13-1548-43b7-9fe2-ec151fbb90de", "row_index": 168, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3de29a13-1548-43b7-9fe2-ec151fbb90de", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f1419c8-e90e-4276-884b-ae7017126f60", "record_id": "flaws_cloudtrail:0000169:0f1419c8-e90e-4276-884b-ae7017126f60", "row_index": 169, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f1419c8-e90e-4276-884b-ae7017126f60", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "667752-6c5d-4ce5-bed5-265d4847c413", "record_id": "flaws_cloudtrail:0000170:667752-6c5d-4ce5-bed5-265d4847c413", "row_index": 170, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "667752-6c5d-4ce5-bed5-265d4847c413", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c37c5b-4148-4888-9c25-8018f79ba493", "record_id": "flaws_cloudtrail:0000171:16c37c5b-4148-4888-9c25-8018f79ba493", "row_index": 171, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c37c5b-4148-4888-9c25-8018f79ba493", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de475ad8-4095-40aa-857f-0fa6c19a862a", "record_id": "flaws_cloudtrail:0000172:de475ad8-4095-40aa-857f-0fa6c19a862a", "row_index": 172, "timestamp": "2019-06-20T21:31:36Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de475ad8-4095-40aa-857f-0fa6c19a862a", "eventTime": "2019-06-20T21:31:36Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028f0b2f-d51b-4824-95e2-9095e5f10b37", "record_id": "flaws_cloudtrail:0000173:028f0b2f-d51b-4824-95e2-9095e5f10b37", "row_index": 173, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028f0b2f-d51b-4824-95e2-9095e5f10b37", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51557b-7664-49b2-af96-7c53ac0d7564", "record_id": "flaws_cloudtrail:0000174:51557b-7664-49b2-af96-7c53ac0d7564", "row_index": 174, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51557b-7664-49b2-af96-7c53ac0d7564", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f366450-e743-4b17-b5fc-e97122fbace8", "record_id": "flaws_cloudtrail:0000175:39f366450-e743-4b17-b5fc-e97122fbace8", "row_index": 175, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f366450-e743-4b17-b5fc-e97122fbace8", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "record_id": "flaws_cloudtrail:0000176:d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "row_index": 176, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df237b5-6b95-4c66-afa5-cb922cefdcc4", "record_id": "flaws_cloudtrail:0000177:7df237b5-6b95-4c66-afa5-cb922cefdcc4", "row_index": 177, "timestamp": "2019-06-20T21:31:37Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df237b5-6b95-4c66-afa5-cb922cefdcc4", "eventTime": "2019-06-20T21:31:37Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028f0b2f-d51b-4824-95e2-9095e5f10b37", "record_id": "flaws_cloudtrail:0000178:028f0b2f-d51b-4824-95e2-9095e5f10b37", "row_index": 178, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028f0b2f-d51b-4824-95e2-9095e5f10b37", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51557b-7664-49b2-af96-7c53ac0d7564", "record_id": "flaws_cloudtrail:0000179:51557b-7664-49b2-af96-7c53ac0d7564", "row_index": 179, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1142, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51557b-7664-49b2-af96-7c53ac0d7564", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f366450-e743-4b17-b5fc-e97122fbace8", "record_id": "flaws_cloudtrail:0000180:39f366450-e743-4b17-b5fc-e97122fbace8", "row_index": 180, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f366450-e743-4b17-b5fc-e97122fbace8", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "record_id": "flaws_cloudtrail:0000181:d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "row_index": 181, "timestamp": "2019-06-20T21:31:37Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d67c7f84-c3e1-45e1-aabb-69f3df6af82e", "eventTime": "2019-06-20T21:31:37Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df237b5-6b95-4c66-afa5-cb922cefdcc4", "record_id": "flaws_cloudtrail:0000182:7df237b5-6b95-4c66-afa5-cb922cefdcc4", "row_index": 182, "timestamp": "2019-06-20T21:31:37Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df237b5-6b95-4c66-afa5-cb922cefdcc4", "eventTime": "2019-06-20T21:31:37Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401a1815-64d2-4c70-8c8b-5ad260072196", "record_id": "flaws_cloudtrail:0000183:401a1815-64d2-4c70-8c8b-5ad260072196", "row_index": 183, "timestamp": "2019-06-20T21:31:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401a1815-64d2-4c70-8c8b-5ad260072196", "eventTime": "2019-06-20T21:31:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5d475330-1478-49f1-a2d6-e85ad786fd55", "record_id": "flaws_cloudtrail:0000184:f5d475330-1478-49f1-a2d6-e85ad786fd55", "row_index": 184, "timestamp": "2019-06-20T21:31:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5d475330-1478-49f1-a2d6-e85ad786fd55", "eventTime": "2019-06-20T21:31:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401a1815-64d2-4c70-8c8b-5ad260072196", "record_id": "flaws_cloudtrail:0000185:401a1815-64d2-4c70-8c8b-5ad260072196", "row_index": 185, "timestamp": "2019-06-20T21:31:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401a1815-64d2-4c70-8c8b-5ad260072196", "eventTime": "2019-06-20T21:31:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5d475330-1478-49f1-a2d6-e85ad786fd55", "record_id": "flaws_cloudtrail:0000186:f5d475330-1478-49f1-a2d6-e85ad786fd55", "row_index": 186, "timestamp": "2019-06-20T21:31:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5d475330-1478-49f1-a2d6-e85ad786fd55", "eventTime": "2019-06-20T21:31:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b461de9-7590-4617-b3f5-53fdb83e002b", "record_id": "flaws_cloudtrail:0000187:4b461de9-7590-4617-b3f5-53fdb83e002b", "row_index": 187, "timestamp": "2019-06-20T21:39:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "[aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b461de9-7590-4617-b3f5-53fdb83e002b", "eventTime": "2019-06-20T21:39:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "[aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b461de9-7590-4617-b3f5-53fdb83e002b", "record_id": "flaws_cloudtrail:0000188:4b461de9-7590-4617-b3f5-53fdb83e002b", "row_index": 188, "timestamp": "2019-06-20T21:39:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "[aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b461de9-7590-4617-b3f5-53fdb83e002b", "eventTime": "2019-06-20T21:39:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "[aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "record_id": "flaws_cloudtrail:0000189:36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "row_index": 189, "timestamp": "2019-06-20T22:26:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "eventTime": "2019-06-20T22:26:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL5HPGYWNS5HRCLRU", "expiration": "Jun 21, 2019 4:33:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "record_id": "flaws_cloudtrail:0000190:36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "row_index": 190, "timestamp": "2019-06-20T22:26:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ccecdf-4e3f-4cab-ab2e-4fc1523f1139", "eventTime": "2019-06-20T22:26:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL5HPGYWNS5HRCLRU", "expiration": "Jun 21, 2019 4:33:50 AM", "sessionToken": "AgoJb3JpZ2luX2VjEF8aCXVzLXdlc3QtMiJHMEUCIGC82wioCoqhNn/5D/Z8f2z7n3zTcoX7GRQXDnvyRtGaAiEAm9WnyLEtq5sXGCQaVvjeCqXqMiPtPx1Pr1dBlKeDCs0q4wMImP//////////ARAAGgw5NzU0MjYyNjIwMjkiDCZljkgyjL2BaQzrRyq3A+rSXrKeD4+qkOdZBr+WMw2Lo5vslCHir4uQfBnwGgPfZnSZQim9puQfIwUHAw+Ydoa276zFXTvVhEMAypC2WvEx/fnCeay2m+zj3+VwzXGhq9ANfsU+7UxvMYjZECbkXrZSxauyfqhf7iMLGcxJFauiAJbeAioANchXXQjdfx9pa4n+fVl1dZEy52+60rRPuFh8RlK6u5+05PMAnEtoEc0BQUdIj0piRg0EPSjC13fyFqv+8IzhtJkRt4p/mh0tj4LAACk5hDk2OmgsQO751H6xbjDM3ZVUMx1VeUO8Y46q27W186++BGLQBUVENboZ3vuajzvhH/LHMB1OSkrjAOq88woLHmw2buAxGvCz7OCcalO8V05YbbZjV62gadeHpGFSWBnDlHJYFSdbo/KyziNy18eJ5QtN/Yy9Kh8n3hAa95hQmQMuh2TVnI44SmcAzJDQRIOW6tceudtQ1qYcXydkoQ3vudhh6dxEMQPYObys54QhTSF9TshJ9TC30BI0vKskbZKGLTYPJlPnk8JnFYj6BvwvJYSl6XNDkYy0CA1gcrh4s6d3vu8+AAlSZJcwyzfH3JR2Nkows5Cw6AU6tAGzXfl0mXU0Fy32nswkhnMsRND6Ai28Yz7ZwFJTrsG5+YuHE5ask70YbXkjPmQ5VkBo6UcoLTYlJ8GCj476f8ZxLCWSBjuOt5RKC8bd4RNZy5Ubsg9MZgQVqIr5GKmjZh87qUy7mnC0VVAm0KBOBV8rKTnS7EQDboZU4dZod2ynnHxE2xIRX9VDo2FU/7t2GtvN8Dki6YVTtgxv2hHqY0TX2uWbpTGH14slFNVdpm+///Vkb/M="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eae23ce-5f53-4009-bfa3-66f6bb260f19", "record_id": "flaws_cloudtrail:0000191:0eae23ce-5f53-4009-bfa3-66f6bb260f19", "row_index": 191, "timestamp": "2019-06-20T22:35:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eae23ce-5f53-4009-bfa3-66f6bb260f19", "eventTime": "2019-06-20T22:35:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3140b38-618e-4b8b-aee3-fbd970af22ee", "record_id": "flaws_cloudtrail:0000192:f3140b38-618e-4b8b-aee3-fbd970af22ee", "row_index": 192, "timestamp": "2019-06-20T22:36:24Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3140b38-618e-4b8b-aee3-fbd970af22ee", "eventTime": "2019-06-20T22:36:24Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730b9e43-d070-4d5c-808b-21adfeda34e6", "record_id": "flaws_cloudtrail:0000193:730b9e43-d070-4d5c-808b-21adfeda34e6", "row_index": 193, "timestamp": "2019-06-20T22:38:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 563, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730b9e43-d070-4d5c-808b-21adfeda34e6", "eventTime": "2019-06-20T22:38:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5abd1063-fa52-4bdb-a1a6-42d830962118", "record_id": "flaws_cloudtrail:0000194:5abd1063-fa52-4bdb-a1a6-42d830962118", "row_index": 194, "timestamp": "2019-06-20T22:39:46Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 546, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5abd1063-fa52-4bdb-a1a6-42d830962118", "eventTime": "2019-06-20T22:39:46Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2beac190-27ec-47bb-bfe9-5de2782e198e", "record_id": "flaws_cloudtrail:0000195:2beac190-27ec-47bb-bfe9-5de2782e198e", "row_index": 195, "timestamp": "2019-06-20T22:42:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-32"], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2beac190-27ec-47bb-bfe9-5de2782e198e", "eventTime": "2019-06-20T22:42:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-32", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-32"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ebf090-ee20-442d-abc5-878ed588af8d", "record_id": "flaws_cloudtrail:0000196:b6ebf090-ee20-442d-abc5-878ed588af8d", "row_index": 196, "timestamp": "2019-06-20T22:44:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIACBDF50CH6JPMNP16", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "198.151.216.51", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8811"], "raw_record_size_bytes": 633, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ebf090-ee20-442d-abc5-878ed588af8d", "eventTime": "2019-06-20T22:44:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "198.151.216.51", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIACBDF50CH6JPMNP16", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-8811", "key": "reports/502.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8811"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "record_id": "flaws_cloudtrail:0000197:73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "row_index": 197, "timestamp": "2019-06-20T23:00:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "eventTime": "2019-06-20T23:00:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "record_id": "flaws_cloudtrail:0000198:73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "row_index": 198, "timestamp": "2019-06-20T23:00:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73ae104e-8f76-4b9c-aab4-d0a86b8e57c7", "eventTime": "2019-06-20T23:00:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "record_id": "flaws_cloudtrail:0000199:e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "row_index": 199, "timestamp": "2019-06-20T23:06:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "eventTime": "2019-06-20T23:06:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "record_id": "flaws_cloudtrail:0000200:e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "row_index": 200, "timestamp": "2019-06-20T23:06:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d8ccda-05ce-464e-8016-c2c3c7f5f9d7", "eventTime": "2019-06-20T23:06:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "record_id": "flaws_cloudtrail:0000201:453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "row_index": 201, "timestamp": "2019-06-20T23:06:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "eventTime": "2019-06-20T23:06:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSdloxQzVwQVIyaHlHWUJrdGdDOXVna2hta2l1dHNoNU1xRytNeFh6c1FCRmw5NzV0ZGtQMkp5L2d6cGZ3Tk02VHM2YW4vTVphd0VZSzZkak1GWlAwQUFyeVhGNWZyNW8rNjg2Z0EyYkRrNUprNkhrOFIyZWlCYzViSmZPRDJHMnpjMTl3dThpYjlhN0JjY3YrNll6QzZNZEV6YmJaVTJNaE5aT3VSc1dqVVlSZzhuVUwzekhiVm9rU3VYb20zQW9QdFEwaVRiL0lkaXBMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "record_id": "flaws_cloudtrail:0000202:453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "row_index": 202, "timestamp": "2019-06-20T23:06:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453ae72e-5e0b-4d14-9d4f-9ed225707fb7", "eventTime": "2019-06-20T23:06:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSdloxQzVwQVIyaHlHWUJrdGdDOXVna2hta2l1dHNoNU1xRytNeFh6c1FCRmw5NzV0ZGtQMkp5L2d6cGZ3Tk02VHM2YW4vTVphd0VZSzZkak1GWlAwQUFyeVhGNWZyNW8rNjg2Z0EyYkRrNUprNkhrOFIyZWlCYzViSmZPRDJHMnpjMTl3dThpYjlhN0JjY3YrNll6QzZNZEV6YmJaVTJNaE5aT3VSc1dqVVlSZzhuVUwzekhiVm9rU3VYb20zQW9QdFEwaVRiL0lkaXBMUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70803d-fe43-4e35-9548-339c1e478623f", "record_id": "flaws_cloudtrail:0000203:70803d-fe43-4e35-9548-339c1e478623f", "row_index": 203, "timestamp": "2019-06-20T23:06:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70803d-fe43-4e35-9548-339c1e478623f", "eventTime": "2019-06-20T23:06:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjajBTTlJQSXhCeXVzSkRIay9pRmNOTmxCMTcrZzhsTVRrTllVOXEyMng1WWp0bGRVNkJsUEVFTHNCZStmKzhSeUpSLytsMXZ5Mis4Zm8vdVIwbGV4NlhPR3AwVGhpeWw4eENSb28yVTdmWTBzUG5FbEs3VmdtZGl2VitLcXVUd2NEeFVmMVNzL0diYXFKbVloSWxJRDhETVUzNi90SCtMZGNyRmtVNU1NOVdCZHlMZ2Q0R2J3eHFiODhoa2liUFB4b3VuTUpzWFFMV205dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70803d-fe43-4e35-9548-339c1e478623f", "record_id": "flaws_cloudtrail:0000204:70803d-fe43-4e35-9548-339c1e478623f", "row_index": 204, "timestamp": "2019-06-20T23:06:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70803d-fe43-4e35-9548-339c1e478623f", "eventTime": "2019-06-20T23:06:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjajBTTlJQSXhCeXVzSkRIay9pRmNOTmxCMTcrZzhsTVRrTllVOXEyMng1WWp0bGRVNkJsUEVFTHNCZStmKzhSeUpSLytsMXZ5Mis4Zm8vdVIwbGV4NlhPR3AwVGhpeWw4eENSb28yVTdmWTBzUG5FbEs3VmdtZGl2VitLcXVUd2NEeFVmMVNzL0diYXFKbVloSWxJRDhETVUzNi90SCtMZGNyRmtVNU1NOVdCZHlMZ2Q0R2J3eHFiODhoa2liUFB4b3VuTUpzWFFMV205dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "197ebe78-5bab-4513-a642-3f3623acaffb", "record_id": "flaws_cloudtrail:0000205:197ebe78-5bab-4513-a642-3f3623acaffb", "row_index": 205, "timestamp": "2019-06-20T23:06:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "197ebe78-5bab-4513-a642-3f3623acaffb", "eventTime": "2019-06-20T23:06:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqdjdJbnh4bks5ZVN5ZXhycUw0czR3Q2ptdEM2elplNnFSd1g5Ui9TMEpCNy9YVmt1MlBzVlRHZ0UzcDZSZytvM05CMnplcU9rU09Nc3pTRWlweGx6ODVWUUczK1hOMlU0c1AwV0NXN1BhYmFac0VwNVRwUkVGMGN3aGlGMEVmcUxqMS9aN2oreXhrdldMNFBsWGdqNnJmcjd5MndqZW82dGpKNnhrSEtwOXhjYmVtYXdoKzdqM1p0cG41THh2S2pxdXJrejVJU21zWTVWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "197ebe78-5bab-4513-a642-3f3623acaffb", "record_id": "flaws_cloudtrail:0000206:197ebe78-5bab-4513-a642-3f3623acaffb", "row_index": 206, "timestamp": "2019-06-20T23:06:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "197ebe78-5bab-4513-a642-3f3623acaffb", "eventTime": "2019-06-20T23:06:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqdjdJbnh4bks5ZVN5ZXhycUw0czR3Q2ptdEM2elplNnFSd1g5Ui9TMEpCNy9YVmt1MlBzVlRHZ0UzcDZSZytvM05CMnplcU9rU09Nc3pTRWlweGx6ODVWUUczK1hOMlU0c1AwV0NXN1BhYmFac0VwNVRwUkVGMGN3aGlGMEVmcUxqMS9aN2oreXhrdldMNFBsWGdqNnJmcjd5MndqZW82dGpKNnhrSEtwOXhjYmVtYXdoKzdqM1p0cG41THh2S2pxdXJrejVJU21zWTVWQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "record_id": "flaws_cloudtrail:0000207:e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "row_index": 207, "timestamp": "2019-06-20T23:06:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "eventTime": "2019-06-20T23:06:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBaXJxZ1cvanZMb0RVb1dPbzBWVFpwYXc4Ni80RHBndGlFcjJnUXFwcytxQnlCaUhHTHN4dGhEcVNiODM3aUNxV3YyWjNjU1RIMzY4OFlNbU83RjFKRCt4bzRZUThZeE9jMUE4K1lzZnFPc2dRU1BpaUNoTlhKeEdaMTZQT1ZDT0VrOHlDdTJqY3NqanZ4RjgvbC9ncVNHRjVoeTR2OEExM3RmQmJscGQ4ZjZQTTNLTlRLbFBDZ0hoR1JacGROaXdBQWVkNUVGWHJJQzE0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "record_id": "flaws_cloudtrail:0000208:e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "row_index": 208, "timestamp": "2019-06-20T23:06:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e238b45a-deb1-40a4-8dbc-e9dc7ec7fb5c", "eventTime": "2019-06-20T23:06:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBaXJxZ1cvanZMb0RVb1dPbzBWVFpwYXc4Ni80RHBndGlFcjJnUXFwcytxQnlCaUhHTHN4dGhEcVNiODM3aUNxV3YyWjNjU1RIMzY4OFlNbU83RjFKRCt4bzRZUThZeE9jMUE4K1lzZnFPc2dRU1BpaUNoTlhKeEdaMTZQT1ZDT0VrOHlDdTJqY3NqanZ4RjgvbC9ncVNHRjVoeTR2OEExM3RmQmJscGQ4ZjZQTTNLTlRLbFBDZ0hoR1JacGROaXdBQWVkNUVGWHJJQzE0UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3799e2d-7561-43bb-8431-3833a4bdda49", "record_id": "flaws_cloudtrail:0000209:a3799e2d-7561-43bb-8431-3833a4bdda49", "row_index": 209, "timestamp": "2019-06-20T23:06:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3799e2d-7561-43bb-8431-3833a4bdda49", "eventTime": "2019-06-20T23:06:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvb2NROXBneTBiVW0weGdPb2Ixb2ZCNXFPa0lCMllJMDBsZnJjVUxIZWtuaTZkRjhaZkxsMTRGWWFpdDBwMjRUREZkdFpJR1kvbkZMaldrV3U1ZjZobFdWUVQzYTVxYk1mVjRDYWVtcHNXQVpUdmhadEt1YityMzgzUW5oTFBuZlliZ0h1VnpxN3BQMXhMeXcwVyt2amxYNGVMa1FZb29sckhxYU1jOUlRRTIrNi81eDgrbGFONTg4QVB2anhTb0VaYTh6ZlFOK0V6R2RIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3799e2d-7561-43bb-8431-3833a4bdda49", "record_id": "flaws_cloudtrail:0000210:a3799e2d-7561-43bb-8431-3833a4bdda49", "row_index": 210, "timestamp": "2019-06-20T23:06:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3799e2d-7561-43bb-8431-3833a4bdda49", "eventTime": "2019-06-20T23:06:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvb2NROXBneTBiVW0weGdPb2Ixb2ZCNXFPa0lCMllJMDBsZnJjVUxIZWtuaTZkRjhaZkxsMTRGWWFpdDBwMjRUREZkdFpJR1kvbkZMaldrV3U1ZjZobFdWUVQzYTVxYk1mVjRDYWVtcHNXQVpUdmhadEt1YityMzgzUW5oTFBuZlliZ0h1VnpxN3BQMXhMeXcwVyt2amxYNGVMa1FZb29sckhxYU1jOUlRRTIrNi81eDgrbGFONTg4QVB2anhTb0VaYTh6ZlFOK0V6R2RIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "record_id": "flaws_cloudtrail:0000211:d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "row_index": 211, "timestamp": "2019-06-20T23:06:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "eventTime": "2019-06-20T23:06:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTE5qeENYV2MyY3liWUNheVg1Nk5UREsyK0ZlTlNCUVVkQ056Mzl1TlZzWWtIMXpTQVh4M3JKTzhuOVZPL3lVRW9oQTdMN3ozKzlxb2Q2d0NFUkw3dzFzL2RJbEw0UmI0M1A2eTVxdExGL0dzOGhiZDVVelNzWXppbDV4S0tIM2tERFltQTBScVFZN05EM3hFNzJIUmZKcUl5ZEcxNGE5VEtxQ20xQW80NGhLUy9neWczc1Y3SENKTysrNlVzUUh6OG5DUDdta2UrY25ydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "record_id": "flaws_cloudtrail:0000212:d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "row_index": 212, "timestamp": "2019-06-20T23:06:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5e7e41f-d8ae-41a5-87b9-076e31ee1a49", "eventTime": "2019-06-20T23:06:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrTE5qeENYV2MyY3liWUNheVg1Nk5UREsyK0ZlTlNCUVVkQ056Mzl1TlZzWWtIMXpTQVh4M3JKTzhuOVZPL3lVRW9oQTdMN3ozKzlxb2Q2d0NFUkw3dzFzL2RJbEw0UmI0M1A2eTVxdExGL0dzOGhiZDVVelNzWXppbDV4S0tIM2tERFltQTBScVFZN05EM3hFNzJIUmZKcUl5ZEcxNGE5VEtxQ20xQW80NGhLUy9neWczc1Y3SENKTysrNlVzUUh6OG5DUDdta2UrY25ydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "record_id": "flaws_cloudtrail:0000213:6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "row_index": 213, "timestamp": "2019-06-20T23:06:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "eventTime": "2019-06-20T23:06:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwN3dSSXhpNUlpNjByYmtTQjFpOE1sUlhwTTdTbEJhT01Ra29rd29XYU1sSVg3QnlBci9QeGRybHZnd1FoZTNqTER2bWlhV2M1SDhnSFo5YUJhdG5QWjJ4d2lqdkpvZ0JySy8yaEhOSnl6TWdPWTdqaTcra0QyOWEyZGZETEpKNmJsT1ZQcllmZWY2dUI1UVZzQ3N1YklvcjN6aWJZYTIzRUhjdjd1WFN4dTBHVllpSHNrNDdsRkV5Y0lFZnNkK2tjNjFlalNCeHJ3eCtFZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "record_id": "flaws_cloudtrail:0000214:6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "row_index": 214, "timestamp": "2019-06-20T23:06:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae84765-2ed6-47d7-b3cf-9ebbb930b4fe", "eventTime": "2019-06-20T23:06:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwN3dSSXhpNUlpNjByYmtTQjFpOE1sUlhwTTdTbEJhT01Ra29rd29XYU1sSVg3QnlBci9QeGRybHZnd1FoZTNqTER2bWlhV2M1SDhnSFo5YUJhdG5QWjJ4d2lqdkpvZ0JySy8yaEhOSnl6TWdPWTdqaTcra0QyOWEyZGZETEpKNmJsT1ZQcllmZWY2dUI1UVZzQ3N1YklvcjN6aWJZYTIzRUhjdjd1WFN4dTBHVllpSHNrNDdsRkV5Y0lFZnNkK2tjNjFlalNCeHJ3eCtFZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d356010b-8618-49ec-a6d3-84e6d2b99c68", "record_id": "flaws_cloudtrail:0000215:6d356010b-8618-49ec-a6d3-84e6d2b99c68", "row_index": 215, "timestamp": "2019-06-20T23:06:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d356010b-8618-49ec-a6d3-84e6d2b99c68", "eventTime": "2019-06-20T23:06:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJML0EwV2llMVJLeTNUR05KaGQ3Vi8rTGZoaGZYMVVHYmVNOFJ6MWZRUmxYR2VUWlpRT3RnUEJUMlI2S1Z2K1duczhtTEV3Y09YTFl2RHlPNVJ3anNRMmhoRTdZYXBLWEQ5c21VeDIxRll0ODdiSEtucHdVOFpMVlROdVJPKzl0REpSQzVDNDNHSGdodEpZVGpGbU1VSm1oaEtGditGMUZyZmUyR0NSYTZva0dnWWZMWXhhSTNpYVFYZHRuN2YrbnpCbWxKdk5vVFVkUEJTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d356010b-8618-49ec-a6d3-84e6d2b99c68", "record_id": "flaws_cloudtrail:0000216:6d356010b-8618-49ec-a6d3-84e6d2b99c68", "row_index": 216, "timestamp": "2019-06-20T23:06:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d356010b-8618-49ec-a6d3-84e6d2b99c68", "eventTime": "2019-06-20T23:06:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJML0EwV2llMVJLeTNUR05KaGQ3Vi8rTGZoaGZYMVVHYmVNOFJ6MWZRUmxYR2VUWlpRT3RnUEJUMlI2S1Z2K1duczhtTEV3Y09YTFl2RHlPNVJ3anNRMmhoRTdZYXBLWEQ5c21VeDIxRll0ODdiSEtucHdVOFpMVlROdVJPKzl0REpSQzVDNDNHSGdodEpZVGpGbU1VSm1oaEtGditGMUZyZmUyR0NSYTZva0dnWWZMWXhhSTNpYVFYZHRuN2YrbnpCbWxKdk5vVFVkUEJTUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6df60bcc-a7c1-46f6-8b8f-51640e68739a", "record_id": "flaws_cloudtrail:0000217:6df60bcc-a7c1-46f6-8b8f-51640e68739a", "row_index": 217, "timestamp": "2019-06-20T23:06:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6df60bcc-a7c1-46f6-8b8f-51640e68739a", "eventTime": "2019-06-20T23:06:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2RVFsOWZyMHNFTUpWeUhpYk9ZeHNobHZQTkFOOXo2Q05XMVRxNGY2TTA2aWJKUmZoUkNCQ2FhVW4rN24xQ1kvZ212QzNSTnRINk93OW81NjJpUHhMR3U5MUdEVG9RYlJNOXdwY3RlUFp0ZXg3RlNNeHByTkpYMDg5QVBtYmUzZWpJM243M3ZCeEJFQ0ZJd2JveXRwYmVwSEpNSytvUlBnNXJ6NlAzamt2Qi9kS2xhbmhuYXJsV0EyTTk0aFpJNjlrWjFuRjBLVm1iVzJDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6df60bcc-a7c1-46f6-8b8f-51640e68739a", "record_id": "flaws_cloudtrail:0000218:6df60bcc-a7c1-46f6-8b8f-51640e68739a", "row_index": 218, "timestamp": "2019-06-20T23:06:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6df60bcc-a7c1-46f6-8b8f-51640e68739a", "eventTime": "2019-06-20T23:06:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2RVFsOWZyMHNFTUpWeUhpYk9ZeHNobHZQTkFOOXo2Q05XMVRxNGY2TTA2aWJKUmZoUkNCQ2FhVW4rN24xQ1kvZ212QzNSTnRINk93OW81NjJpUHhMR3U5MUdEVG9RYlJNOXdwY3RlUFp0ZXg3RlNNeHByTkpYMDg5QVBtYmUzZWpJM243M3ZCeEJFQ0ZJd2JveXRwYmVwSEpNSytvUlBnNXJ6NlAzamt2Qi9kS2xhbmhuYXJsV0EyTTk0aFpJNjlrWjFuRjBLVm1iVzJDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "965dd61e-7b69-4735-b28a-94aec71c37a9", "record_id": "flaws_cloudtrail:0000219:965dd61e-7b69-4735-b28a-94aec71c37a9", "row_index": 219, "timestamp": "2019-06-20T23:06:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "965dd61e-7b69-4735-b28a-94aec71c37a9", "eventTime": "2019-06-20T23:06:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuRlVNTnlZN1d6N0dwcEJZOWxoSStuajZJc2ZaaFRzb2dKRXV6blpNaitaU25mWlZWbStXYStOYmJtMEhvY0Fsc0tYMHRENGtnV1piYWl0bWZxOTlnOWk4VWRvMUpWWVBhN2N6TC9QVlJMQ2NhelkxS04zd0FUT2l6YWVNdi9rbTRBM3cwaDB4OXRZME8wK2ZySjNMMWZxRmxxUkZEaytYay9MN1BMcUpEY1VBWm5jRlVkYnJOQmlZRS9KUHplN2p6U3hSNUFLSnQ0YmdvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "965dd61e-7b69-4735-b28a-94aec71c37a9", "record_id": "flaws_cloudtrail:0000220:965dd61e-7b69-4735-b28a-94aec71c37a9", "row_index": 220, "timestamp": "2019-06-20T23:06:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "965dd61e-7b69-4735-b28a-94aec71c37a9", "eventTime": "2019-06-20T23:06:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuRlVNTnlZN1d6N0dwcEJZOWxoSStuajZJc2ZaaFRzb2dKRXV6blpNaitaU25mWlZWbStXYStOYmJtMEhvY0Fsc0tYMHRENGtnV1piYWl0bWZxOTlnOWk4VWRvMUpWWVBhN2N6TC9QVlJMQ2NhelkxS04zd0FUT2l6YWVNdi9rbTRBM3cwaDB4OXRZME8wK2ZySjNMMWZxRmxxUkZEaytYay9MN1BMcUpEY1VBWm5jRlVkYnJOQmlZRS9KUHplN2p6U3hSNUFLSnQ0YmdvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343021ed-69d0-42f2-ac26-60d59c287a62", "record_id": "flaws_cloudtrail:0000221:343021ed-69d0-42f2-ac26-60d59c287a62", "row_index": 221, "timestamp": "2019-06-20T23:06:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343021ed-69d0-42f2-ac26-60d59c287a62", "eventTime": "2019-06-20T23:06:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDakVvYzN5R2lrMU5lRG9sY0ZBYVRxOEtKcC9uK3JNUTEyU2EyaXE2L3BHa293cWtXRStKZjUrQXJhY1JsL2hLYzdsYXpDcVVnWkRXa2theDZ1cW51Y29tclQ2TU1JWHJIeWw3ZmxjT3p4L2M3azMvZHZoTjhadjZGbXliMlovVEFBUFZrRFN1a05Od1ErbXY5OHJLUFE1OUFvbTU0eVdySTYyZWZEaTUvT2VJaEV4ZmFQZnp3VDJQa2ErSW5CVjhDdVM0bzl4aEg1MDBEdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "343021ed-69d0-42f2-ac26-60d59c287a62", "record_id": "flaws_cloudtrail:0000222:343021ed-69d0-42f2-ac26-60d59c287a62", "row_index": 222, "timestamp": "2019-06-20T23:06:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "343021ed-69d0-42f2-ac26-60d59c287a62", "eventTime": "2019-06-20T23:06:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDakVvYzN5R2lrMU5lRG9sY0ZBYVRxOEtKcC9uK3JNUTEyU2EyaXE2L3BHa293cWtXRStKZjUrQXJhY1JsL2hLYzdsYXpDcVVnWkRXa2theDZ1cW51Y29tclQ2TU1JWHJIeWw3ZmxjT3p4L2M3azMvZHZoTjhadjZGbXliMlovVEFBUFZrRFN1a05Od1ErbXY5OHJLUFE1OUFvbTU0eVdySTYyZWZEaTUvT2VJaEV4ZmFQZnp3VDJQa2ErSW5CVjhDdVM0bzl4aEg1MDBEdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d212747-6a97-4e41-800a-af47e624c766", "record_id": "flaws_cloudtrail:0000223:d212747-6a97-4e41-800a-af47e624c766", "row_index": 223, "timestamp": "2019-06-20T23:06:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d212747-6a97-4e41-800a-af47e624c766", "eventTime": "2019-06-20T23:06:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNa1ZBWHZlUTN4c0owaUhtbE4zVHpKVllBZjNwRzViRndRaFR6V0gwSENuck1pa3NWd0x0eUlYRE5aQ2FVdU9ZL3VjUzZpVDltVy84emdlS0I2Uzl0TjhZMzVSZUpQZmw4dEFhN0hwdmY1MDFxSHpHUzNNb3VlUEJFMHh0RngzNjFEbFlJWkxheHpvZEw5NmpzQ3NneStwYkl3MVZTQUIvTjRZYi9tWmdPd3BQZjVoMVJ6Y1NRQ2RIcTMvR0J5NE9TWlo1ZDNRV1pHYWJrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e907674-7309-49cd-bd3e-e944866782de", "record_id": "flaws_cloudtrail:0000224:4e907674-7309-49cd-bd3e-e944866782de", "row_index": 224, "timestamp": "2019-06-20T23:06:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e907674-7309-49cd-bd3e-e944866782de", "eventTime": "2019-06-20T23:06:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJabmxSZkFlREE0ektCVDF5TkZPdTNtSXVPMkVoVTFvd25ZZDMrOFk0YzJ4amt4UXY2azFaQnFCZnVqRUZ5WFlGYzRqRkdiZXN3cU5QTWVLSXczcEdoMGt1dHM2YXVHVXhhdGF0MUh1b1AwOStEUm1DUDJzRFlKNnM3eDVtVWhVcnRHTHphMEJaRGR3eHI5UWFoUEpoYU81YTZSZUhRZXJPdWpJak1CYWtueld2NzE4WVU2cVh4Z05FYzRrOTBabW4xOUQ1YkhjRVNNVHlCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d212747-6a97-4e41-800a-af47e624c766", "record_id": "flaws_cloudtrail:0000225:d212747-6a97-4e41-800a-af47e624c766", "row_index": 225, "timestamp": "2019-06-20T23:06:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d212747-6a97-4e41-800a-af47e624c766", "eventTime": "2019-06-20T23:06:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNa1ZBWHZlUTN4c0owaUhtbE4zVHpKVllBZjNwRzViRndRaFR6V0gwSENuck1pa3NWd0x0eUlYRE5aQ2FVdU9ZL3VjUzZpVDltVy84emdlS0I2Uzl0TjhZMzVSZUpQZmw4dEFhN0hwdmY1MDFxSHpHUzNNb3VlUEJFMHh0RngzNjFEbFlJWkxheHpvZEw5NmpzQ3NneStwYkl3MVZTQUIvTjRZYi9tWmdPd3BQZjVoMVJ6Y1NRQ2RIcTMvR0J5NE9TWlo1ZDNRV1pHYWJrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e907674-7309-49cd-bd3e-e944866782de", "record_id": "flaws_cloudtrail:0000226:4e907674-7309-49cd-bd3e-e944866782de", "row_index": 226, "timestamp": "2019-06-20T23:06:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e907674-7309-49cd-bd3e-e944866782de", "eventTime": "2019-06-20T23:06:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJabmxSZkFlREE0ektCVDF5TkZPdTNtSXVPMkVoVTFvd25ZZDMrOFk0YzJ4amt4UXY2azFaQnFCZnVqRUZ5WFlGYzRqRkdiZXN3cU5QTWVLSXczcEdoMGt1dHM2YXVHVXhhdGF0MUh1b1AwOStEUm1DUDJzRFlKNnM3eDVtVWhVcnRHTHphMEJaRGR3eHI5UWFoUEpoYU81YTZSZUhRZXJPdWpJak1CYWtueld2NzE4WVU2cVh4Z05FYzRrOTBabW4xOUQ1YkhjRVNNVHlCdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d290b72-60ee-4854-8ec9-2b0f9b908329", "record_id": "flaws_cloudtrail:0000227:1d290b72-60ee-4854-8ec9-2b0f9b908329", "row_index": 227, "timestamp": "2019-06-20T23:06:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d290b72-60ee-4854-8ec9-2b0f9b908329", "eventTime": "2019-06-20T23:06:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRXhMelpRZzFYVWVzOE1OMm9UbGVhNlRuekl1TytGWXQ0bENqeW9qZnh2OFVwRzdMaHFqWE5ZTkk4Z2lLL09NT2lEMTIxczRjSVZ0dWUvVklZcXdMWnBSTWNzZFZIL0JDL0JkcW1WaGtVb0VFbWhLblJhMzdnZ2ZIbG15M3ZaNGMrU21obWRhTDhCNlpJVHlXZ2tHNW9TRk4ybDVEZTl0ajhHckdITG0vY3FkN2tVQ1ZoZ2NyOHpFWVRGSFFDUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff30894-1609-44f4-9ce8-cb7065fb90f9", "record_id": "flaws_cloudtrail:0000228:ff30894-1609-44f4-9ce8-cb7065fb90f9", "row_index": 228, "timestamp": "2019-06-20T23:06:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff30894-1609-44f4-9ce8-cb7065fb90f9", "eventTime": "2019-06-20T23:06:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZRHVja3N5Tm1BTkUvazVJeUpZeUh2UlYrYzY2ZTlKVk1DQkZXK3dFeGxFZklQVWZxOFFFaHp4aDJQeEJoK1ZTNVBscXNDdjFZbTF2NEV0SitFOUlXNDJsd3VTQVhHUk1hYm5hRE15VzdxbXFNdVlJbWxLbXdYUE52UFhmSVQ0aE1VeHhVN2Q1REwvSzhKcTZHRUUrdjdWT1pBbzBHREw4ZWdQM1F6OVhuN3lDWWtyNE1ERXYwOGxnRTMyeGdLL2hEZHlrWERDUFM0aHdpYVFJS3ZsQkI4R2xPZCtiaEpBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d290b72-60ee-4854-8ec9-2b0f9b908329", "record_id": "flaws_cloudtrail:0000229:1d290b72-60ee-4854-8ec9-2b0f9b908329", "row_index": 229, "timestamp": "2019-06-20T23:06:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d290b72-60ee-4854-8ec9-2b0f9b908329", "eventTime": "2019-06-20T23:06:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRXhMelpRZzFYVWVzOE1OMm9UbGVhNlRuekl1TytGWXQ0bENqeW9qZnh2OFVwRzdMaHFqWE5ZTkk4Z2lLL09NT2lEMTIxczRjSVZ0dWUvVklZcXdMWnBSTWNzZFZIL0JDL0JkcW1WaGtVb0VFbWhLblJhMzdnZ2ZIbG15M3ZaNGMrU21obWRhTDhCNlpJVHlXZ2tHNW9TRk4ybDVEZTl0ajhHckdITG0vY3FkN2tVQ1ZoZ2NyOHpFWVRGSFFDUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff30894-1609-44f4-9ce8-cb7065fb90f9", "record_id": "flaws_cloudtrail:0000230:ff30894-1609-44f4-9ce8-cb7065fb90f9", "row_index": 230, "timestamp": "2019-06-20T23:06:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff30894-1609-44f4-9ce8-cb7065fb90f9", "eventTime": "2019-06-20T23:06:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZRHVja3N5Tm1BTkUvazVJeUpZeUh2UlYrYzY2ZTlKVk1DQkZXK3dFeGxFZklQVWZxOFFFaHp4aDJQeEJoK1ZTNVBscXNDdjFZbTF2NEV0SitFOUlXNDJsd3VTQVhHUk1hYm5hRE15VzdxbXFNdVlJbWxLbXdYUE52UFhmSVQ0aE1VeHhVN2Q1REwvSzhKcTZHRUUrdjdWT1pBbzBHREw4ZWdQM1F6OVhuN3lDWWtyNE1ERXYwOGxnRTMyeGdLL2hEZHlrWERDUFM0aHdpYVFJS3ZsQkI4R2xPZCtiaEpBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "894b57d9-e4b5-4209-a619-decab0f90e0b", "record_id": "flaws_cloudtrail:0000231:894b57d9-e4b5-4209-a619-decab0f90e0b", "row_index": 231, "timestamp": "2019-06-20T23:06:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "894b57d9-e4b5-4209-a619-decab0f90e0b", "eventTime": "2019-06-20T23:06:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5ZkVYdVlMT2V3cyt4Nm95eUhkb2NQSFh1Um1WcENUcEdzNCtNTGZCd2dmbWFYL0lKMnVyNUlSeXY0N1I0bEVkQlQza1RoditEK2syRlc5RGRtaE5Jb0RBa2xFeDFucVZ0eHlEU3hKazNXTHRYOWVRZ0JGMXNWUFV4Z3NERWcySkZSSnMwdHNNN1VLdlBlS21jQ2FSYnI3R0FpVXJkR296OEYzQUxYdTRkOERHb1FTRFgxako0bmR3M0U4dlVodUd6SWRSTk4vZlh5Q08zN3ZDZHBMZGxZVEljb0NwcUIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162472ee9-6505-4e59-8f11-ab578f6c659a", "record_id": "flaws_cloudtrail:0000232:162472ee9-6505-4e59-8f11-ab578f6c659a", "row_index": 232, "timestamp": "2019-06-20T23:06:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162472ee9-6505-4e59-8f11-ab578f6c659a", "eventTime": "2019-06-20T23:06:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpa25KQjZRR1ZGTjV3YTE2VC9rb0l5T0RLLzV1YUVDVHZ5OUtLazB2d3dQL0Z6cUZKNHJKYURnOVY3STM0K1hUa0RROGIxMXc5SWQrdk5uRGk2UUhHU1Qxb3d3bXRwR2lFVjYxL2thdTJzNXgzN2xjajdyRWJNZ0h5Y1lscmRpb0Q4VjJjTWZmQnJ6ZC9XQkRVNUE0VGc5bjV2ZTlVSnZTb2RzeDI5a0V5QlRvWTZRa3lncVFpd0tpRlFiMVhzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "894b57d9-e4b5-4209-a619-decab0f90e0b", "record_id": "flaws_cloudtrail:0000233:894b57d9-e4b5-4209-a619-decab0f90e0b", "row_index": 233, "timestamp": "2019-06-20T23:06:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "894b57d9-e4b5-4209-a619-decab0f90e0b", "eventTime": "2019-06-20T23:06:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5ZkVYdVlMT2V3cyt4Nm95eUhkb2NQSFh1Um1WcENUcEdzNCtNTGZCd2dmbWFYL0lKMnVyNUlSeXY0N1I0bEVkQlQza1RoditEK2syRlc5RGRtaE5Jb0RBa2xFeDFucVZ0eHlEU3hKazNXTHRYOWVRZ0JGMXNWUFV4Z3NERWcySkZSSnMwdHNNN1VLdlBlS21jQ2FSYnI3R0FpVXJkR296OEYzQUxYdTRkOERHb1FTRFgxako0bmR3M0U4dlVodUd6SWRSTk4vZlh5Q08zN3ZDZHBMZGxZVEljb0NwcUIwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162472ee9-6505-4e59-8f11-ab578f6c659a", "record_id": "flaws_cloudtrail:0000234:162472ee9-6505-4e59-8f11-ab578f6c659a", "row_index": 234, "timestamp": "2019-06-20T23:06:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162472ee9-6505-4e59-8f11-ab578f6c659a", "eventTime": "2019-06-20T23:06:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpa25KQjZRR1ZGTjV3YTE2VC9rb0l5T0RLLzV1YUVDVHZ5OUtLazB2d3dQL0Z6cUZKNHJKYURnOVY3STM0K1hUa0RROGIxMXc5SWQrdk5uRGk2UUhHU1Qxb3d3bXRwR2lFVjYxL2thdTJzNXgzN2xjajdyRWJNZ0h5Y1lscmRpb0Q4VjJjTWZmQnJ6ZC9XQkRVNUE0VGc5bjV2ZTlVSnZTb2RzeDI5a0V5QlRvWTZRa3lncVFpd0tpRlFiMVhzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620a52db-5d9d-4549-9b5d-4483a1514144", "record_id": "flaws_cloudtrail:0000235:620a52db-5d9d-4549-9b5d-4483a1514144", "row_index": 235, "timestamp": "2019-06-20T23:06:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620a52db-5d9d-4549-9b5d-4483a1514144", "eventTime": "2019-06-20T23:06:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPY2g3Qnl6aGJlZU1uNkdOOG1OMHpRSldCTk1IcVgydFlPcUR6Y1QxRjRBRUx5VnpiNGpLU2dsaktPcE94bTN3ZExBUjEwMjdsOWVlRjVuTFl1TlRRWU9nK3lDL0dlbnNZNlRGZFVPeVFscFhRS2syTlAzckdEa21xb3VNZ0huVWtnd0N5dExHUjY3bkc5a0Fobi9jWElSN1lpVUU5Tk92dzYyNnM2VHVjVmU5TXNjVXBlMG9DeVI1RlNkZWdqazNGb0NSMStHckFhcjM0clZrdWs1NkdXb2ZCTExPMmxZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c93d56fe-f43c-412a-8064-afb8814dd134", "record_id": "flaws_cloudtrail:0000236:c93d56fe-f43c-412a-8064-afb8814dd134", "row_index": 236, "timestamp": "2019-06-20T23:06:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c93d56fe-f43c-412a-8064-afb8814dd134", "eventTime": "2019-06-20T23:06:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4cVFiQ01IdHJMWDkrQ0RtRkFKMUEwM2wrdzN3TGdPV3I3d29uUzA1d3dIemNWU0RuUmNMcS9ERDVrdytiTFQrWmVHYm55Y0F2LzZXejc1Si9Ud3pvMnl4SW1vd2xkeHJ5TWRqa1V3dk5hQ3hqYWdueGZuWm54TDNycE5CRzNjaXdWYmU5U0p5YkQyT1Q3aytjQ3pvMFJvSmF2UTdEbnlHVVQ5SVUvU05Ia0ZOY1BXUGlzNC9PT1dIa1A2RG9nND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620a52db-5d9d-4549-9b5d-4483a1514144", "record_id": "flaws_cloudtrail:0000237:620a52db-5d9d-4549-9b5d-4483a1514144", "row_index": 237, "timestamp": "2019-06-20T23:06:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620a52db-5d9d-4549-9b5d-4483a1514144", "eventTime": "2019-06-20T23:06:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPY2g3Qnl6aGJlZU1uNkdOOG1OMHpRSldCTk1IcVgydFlPcUR6Y1QxRjRBRUx5VnpiNGpLU2dsaktPcE94bTN3ZExBUjEwMjdsOWVlRjVuTFl1TlRRWU9nK3lDL0dlbnNZNlRGZFVPeVFscFhRS2syTlAzckdEa21xb3VNZ0huVWtnd0N5dExHUjY3bkc5a0Fobi9jWElSN1lpVUU5Tk92dzYyNnM2VHVjVmU5TXNjVXBlMG9DeVI1RlNkZWdqazNGb0NSMStHckFhcjM0clZrdWs1NkdXb2ZCTExPMmxZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c93d56fe-f43c-412a-8064-afb8814dd134", "record_id": "flaws_cloudtrail:0000238:c93d56fe-f43c-412a-8064-afb8814dd134", "row_index": 238, "timestamp": "2019-06-20T23:06:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c93d56fe-f43c-412a-8064-afb8814dd134", "eventTime": "2019-06-20T23:06:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4cVFiQ01IdHJMWDkrQ0RtRkFKMUEwM2wrdzN3TGdPV3I3d29uUzA1d3dIemNWU0RuUmNMcS9ERDVrdytiTFQrWmVHYm55Y0F2LzZXejc1Si9Ud3pvMnl4SW1vd2xkeHJ5TWRqa1V3dk5hQ3hqYWdueGZuWm54TDNycE5CRzNjaXdWYmU5U0p5YkQyT1Q3aytjQ3pvMFJvSmF2UTdEbnlHVVQ5SVUvU05Ia0ZOY1BXUGlzNC9PT1dIa1A2RG9nND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c51fbcb2-b963-47ac-8eeb-b1fed2922324", "record_id": "flaws_cloudtrail:0000239:c51fbcb2-b963-47ac-8eeb-b1fed2922324", "row_index": 239, "timestamp": "2019-06-20T23:06:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c51fbcb2-b963-47ac-8eeb-b1fed2922324", "eventTime": "2019-06-20T23:06:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNeGRWSU1xRi9FQ2hjZVZUbE1wV1liNUxNLysxZGVkOHFtQjBUdTlzYmppZExncFdoZGZ5U1E2YjFGNkRqZmFGRkJ0MzF4a3VpendpTGtyanZFQmN4eTdzVFZRcStkSG9JZWVRZGZOUlpETXZITXlZdUVQbHZBR2hYQnh5N21XcGJsQ3VXTWhwR3E5RW5icTVYSUdSMUVpMDRHT0sraEdmaGRYU05DNVAwL2dRM1hZbWpkNWxBMG9qblRELy8xNkJ0OUMyUDQwN01Cak9RUzJicFUxNUxRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0071f1f7-3449-41de-a736-f2c99ab371086", "record_id": "flaws_cloudtrail:0000240:0071f1f7-3449-41de-a736-f2c99ab371086", "row_index": 240, "timestamp": "2019-06-20T23:06:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0071f1f7-3449-41de-a736-f2c99ab371086", "eventTime": "2019-06-20T23:06:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlQUdXUlRiNThXY2FrTFoxMlFZeGFxeWV4RlI0akFjUXg1ZGFnZjI4Ni81SllSWU03ZnliMjZiVjN0SGFjRWpCa0c2dEVMaXk4OXl5dHEraXlDTzFVMUZiTnZqTmIyTERrRFg4dzVMZXJtT2MzN2JFMURFVks5bmUwTng5TVUyT0lJVjFERXIzMmRSN1RZY3hiOEt2ZklBeThHYTN6TG1LZ3QwYzU2VnBPR0RKSEZLN1l3c1hLb0hDc1BsVXg1SHpsNGxoWURvQm94RU0vakErT3lOc2JEMUN5SS9tRWNFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c51fbcb2-b963-47ac-8eeb-b1fed2922324", "record_id": "flaws_cloudtrail:0000241:c51fbcb2-b963-47ac-8eeb-b1fed2922324", "row_index": 241, "timestamp": "2019-06-20T23:06:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c51fbcb2-b963-47ac-8eeb-b1fed2922324", "eventTime": "2019-06-20T23:06:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNeGRWSU1xRi9FQ2hjZVZUbE1wV1liNUxNLysxZGVkOHFtQjBUdTlzYmppZExncFdoZGZ5U1E2YjFGNkRqZmFGRkJ0MzF4a3VpendpTGtyanZFQmN4eTdzVFZRcStkSG9JZWVRZGZOUlpETXZITXlZdUVQbHZBR2hYQnh5N21XcGJsQ3VXTWhwR3E5RW5icTVYSUdSMUVpMDRHT0sraEdmaGRYU05DNVAwL2dRM1hZbWpkNWxBMG9qblRELy8xNkJ0OUMyUDQwN01Cak9RUzJicFUxNUxRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0071f1f7-3449-41de-a736-f2c99ab371086", "record_id": "flaws_cloudtrail:0000242:0071f1f7-3449-41de-a736-f2c99ab371086", "row_index": 242, "timestamp": "2019-06-20T23:06:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0071f1f7-3449-41de-a736-f2c99ab371086", "eventTime": "2019-06-20T23:06:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlQUdXUlRiNThXY2FrTFoxMlFZeGFxeWV4RlI0akFjUXg1ZGFnZjI4Ni81SllSWU03ZnliMjZiVjN0SGFjRWpCa0c2dEVMaXk4OXl5dHEraXlDTzFVMUZiTnZqTmIyTERrRFg4dzVMZXJtT2MzN2JFMURFVks5bmUwTng5TVUyT0lJVjFERXIzMmRSN1RZY3hiOEt2ZklBeThHYTN6TG1LZ3QwYzU2VnBPR0RKSEZLN1l3c1hLb0hDc1BsVXg1SHpsNGxoWURvQm94RU0vakErT3lOc2JEMUN5SS9tRWNFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "record_id": "flaws_cloudtrail:0000243:75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "row_index": 243, "timestamp": "2019-06-20T23:06:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "eventTime": "2019-06-20T23:06:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0QlBjck9RM1VGQlBCOWNDOUlDblZ6ekpoWm15RU1pOHJ3TVZCZlFOMWpEQVVpTlJsOXU3QUgyNVU5di94MGExMzFERXlGK3kwMXp2ZUdoSkQ0MlhGVlpWVmNLNGlrSDNDYklveHZvN1NSV3Y2NFRWcEU0NUREZEJwbXhxdTFJRlhkSEovaTI2amZOUHRBQWpScjlZMkZXeTJpQk1nbEZObzkxbWFteVRheDQwZE1RSDRTK0dHSy9aVHJHM1B2dGo1TlRuTGlFOHNteUh0NlJVNEhoZjNBTlltZG5xZnc0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de0ce95c-0a23-4977-baf1-80b70c27be3e", "record_id": "flaws_cloudtrail:0000244:de0ce95c-0a23-4977-baf1-80b70c27be3e", "row_index": 244, "timestamp": "2019-06-20T23:06:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de0ce95c-0a23-4977-baf1-80b70c27be3e", "eventTime": "2019-06-20T23:06:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd2RZMDhDbzNkYVJzWXJwTFJxc2ZJRXlYaXR6bk5hdGcvWW4xNkNBMnVBWXBLbzhadXpEdXNJTDNhQ1ZSd1hZVWxyVEwxemNSL3lCODZsdDkvZ0Jpd2pTQmY1VElUU1ROR2dXUEFlOEF0R0lXSEM4b3hkeTFIb1B3cGlxYUE5U0NQU1M2aHo4QzkrYk0wcFJCb1RyVTVyNy9GenlRZXA1UmMySEhaVGlnZzZxbFhLSklDYyttWWtxb3V0aENIaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "record_id": "flaws_cloudtrail:0000245:75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "row_index": 245, "timestamp": "2019-06-20T23:06:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e49d8a-0af3-4ff1-916f-1d8804ba7c5d", "eventTime": "2019-06-20T23:06:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0QlBjck9RM1VGQlBCOWNDOUlDblZ6ekpoWm15RU1pOHJ3TVZCZlFOMWpEQVVpTlJsOXU3QUgyNVU5di94MGExMzFERXlGK3kwMXp2ZUdoSkQ0MlhGVlpWVmNLNGlrSDNDYklveHZvN1NSV3Y2NFRWcEU0NUREZEJwbXhxdTFJRlhkSEovaTI2amZOUHRBQWpScjlZMkZXeTJpQk1nbEZObzkxbWFteVRheDQwZE1RSDRTK0dHSy9aVHJHM1B2dGo1TlRuTGlFOHNteUh0NlJVNEhoZjNBTlltZG5xZnc0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de0ce95c-0a23-4977-baf1-80b70c27be3e", "record_id": "flaws_cloudtrail:0000246:de0ce95c-0a23-4977-baf1-80b70c27be3e", "row_index": 246, "timestamp": "2019-06-20T23:06:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de0ce95c-0a23-4977-baf1-80b70c27be3e", "eventTime": "2019-06-20T23:06:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqd2RZMDhDbzNkYVJzWXJwTFJxc2ZJRXlYaXR6bk5hdGcvWW4xNkNBMnVBWXBLbzhadXpEdXNJTDNhQ1ZSd1hZVWxyVEwxemNSL3lCODZsdDkvZ0Jpd2pTQmY1VElUU1ROR2dXUEFlOEF0R0lXSEM4b3hkeTFIb1B3cGlxYUE5U0NQU1M2aHo4QzkrYk0wcFJCb1RyVTVyNy9GenlRZXA1UmMySEhaVGlnZzZxbFhLSklDYyttWWtxb3V0aENIaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39923f8c-30f6-40e8-8603-f2891b82da37", "record_id": "flaws_cloudtrail:0000247:39923f8c-30f6-40e8-8603-f2891b82da37", "row_index": 247, "timestamp": "2019-06-20T23:07:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39923f8c-30f6-40e8-8603-f2891b82da37", "eventTime": "2019-06-20T23:07:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39923f8c-30f6-40e8-8603-f2891b82da37", "record_id": "flaws_cloudtrail:0000248:39923f8c-30f6-40e8-8603-f2891b82da37", "row_index": 248, "timestamp": "2019-06-20T23:07:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39923f8c-30f6-40e8-8603-f2891b82da37", "eventTime": "2019-06-20T23:07:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54334c-bf9d-4efa-a696-45768f5d50", "record_id": "flaws_cloudtrail:0000249:c54334c-bf9d-4efa-a696-45768f5d50", "row_index": 249, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54334c-bf9d-4efa-a696-45768f5d50", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3M3NZRzF3ZkwrdlFBZXNoZE5kQnVpSVNReUlxVS85R1NxWnRkQ1ppNWdsT3pFbld4aStFK3V6c2k3NExkQkJTMnpnMGp5aUJ4WWhRNGQzMTZnSFBFemswSy9yMWxyaEtraS81clREOFdQSlN2MEozUlVITHNvdDF3dEUxendWT0theFhjL3IrZUkrTGNGM3ZaQXRTQVEzZ1NVWk55MktQak9qeVJRd2RUM2xpbWk2VGZSQ0RFTUFPMS9FYnRUQXRvVmkzY0VKUjBaR1Vrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419435eae-00e1-4c7d-9929-3ce93ef0a10b", "record_id": "flaws_cloudtrail:0000250:419435eae-00e1-4c7d-9929-3ce93ef0a10b", "row_index": 250, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419435eae-00e1-4c7d-9929-3ce93ef0a10b", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdEtmaUtjYTFNZENVREduQ0R4S1F2K2Q2aXcvRXNZc1pHb0YwVDhxMEN0enNLQjRnRCtTSSs2QlA4RnhPUENhdDE4OU95bzA3NllmcnJ3WWp1TWR0eEtUNXB5djZ5MzBGaGNzemJOelRGeCtjbW0xTVNiT2t6V0o0ZWprb0VsazF4azVqQzMvZm84d2dubjJReEZCUFpYRFVWNkVOdTdCOFB5M2ZRNHNYRC9UQ29ldWxCWXROdTlGYzB0YmNpU081SjBQcjh3OG54d1oyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2115ab6-0297-40b5-bfb1-7633c7101e9c", "record_id": "flaws_cloudtrail:0000251:c2115ab6-0297-40b5-bfb1-7633c7101e9c", "row_index": 251, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2115ab6-0297-40b5-bfb1-7633c7101e9c", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4MGcvZGVXN3l6YWx1ZUIwZng3cHVGMHBsWDd4RHBacGRYTzN1SDAvNHBOZjV0VGFvT2drdnlvWWNYM1AranpHVWY4NkJYa3JPRFAyaCtsZzQyNVNNRi9zRkdxNjFjZzBtOGZFZ1ZZSnJkMHB6dS9BMGIrU2ZXcmFmSTg2enZvdHM4WTJqWTVhZEFCTDJLV2t4aTZpVllGQzZac0hvY1I5anZBNHFLUzRZcG5EUkNuQ0ltSExRVDRMeWlSR1hrMW10a1Ixa3Q2L2hieTQ5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54334c-bf9d-4efa-a696-45768f5d50", "record_id": "flaws_cloudtrail:0000252:c54334c-bf9d-4efa-a696-45768f5d50", "row_index": 252, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54334c-bf9d-4efa-a696-45768f5d50", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3M3NZRzF3ZkwrdlFBZXNoZE5kQnVpSVNReUlxVS85R1NxWnRkQ1ppNWdsT3pFbld4aStFK3V6c2k3NExkQkJTMnpnMGp5aUJ4WWhRNGQzMTZnSFBFemswSy9yMWxyaEtraS81clREOFdQSlN2MEozUlVITHNvdDF3dEUxendWT0theFhjL3IrZUkrTGNGM3ZaQXRTQVEzZ1NVWk55MktQak9qeVJRd2RUM2xpbWk2VGZSQ0RFTUFPMS9FYnRUQXRvVmkzY0VKUjBaR1Vrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "419435eae-00e1-4c7d-9929-3ce93ef0a10b", "record_id": "flaws_cloudtrail:0000253:419435eae-00e1-4c7d-9929-3ce93ef0a10b", "row_index": 253, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "419435eae-00e1-4c7d-9929-3ce93ef0a10b", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCdEtmaUtjYTFNZENVREduQ0R4S1F2K2Q2aXcvRXNZc1pHb0YwVDhxMEN0enNLQjRnRCtTSSs2QlA4RnhPUENhdDE4OU95bzA3NllmcnJ3WWp1TWR0eEtUNXB5djZ5MzBGaGNzemJOelRGeCtjbW0xTVNiT2t6V0o0ZWprb0VsazF4azVqQzMvZm84d2dubjJReEZCUFpYRFVWNkVOdTdCOFB5M2ZRNHNYRC9UQ29ldWxCWXROdTlGYzB0YmNpU081SjBQcjh3OG54d1oyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2115ab6-0297-40b5-bfb1-7633c7101e9c", "record_id": "flaws_cloudtrail:0000254:c2115ab6-0297-40b5-bfb1-7633c7101e9c", "row_index": 254, "timestamp": "2019-06-20T23:07:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2115ab6-0297-40b5-bfb1-7633c7101e9c", "eventTime": "2019-06-20T23:07:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4MGcvZGVXN3l6YWx1ZUIwZng3cHVGMHBsWDd4RHBacGRYTzN1SDAvNHBOZjV0VGFvT2drdnlvWWNYM1AranpHVWY4NkJYa3JPRFAyaCtsZzQyNVNNRi9zRkdxNjFjZzBtOGZFZ1ZZSnJkMHB6dS9BMGIrU2ZXcmFmSTg2enZvdHM4WTJqWTVhZEFCTDJLV2t4aTZpVllGQzZac0hvY1I5anZBNHFLUzRZcG5EUkNuQ0ltSExRVDRMeWlSR1hrMW10a1Ixa3Q2L2hieTQ5dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "record_id": "flaws_cloudtrail:0000255:21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "row_index": 255, "timestamp": "2019-06-20T23:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "eventTime": "2019-06-20T23:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwODl5b0Y0cUJvaVNOVXBweWJKWGJGRDN1ZTRKaElzalRUbnc5SWZ3eGNHTnBIMElBWVdyQmwybHVpakJIOW83VFpSRi9TWkVKVHdmL0RMYU9oWER5K0hSWkJyRW8wSSt4MjZuUUo2Wk1ldVVFdkpMNjB4bWdEYm4vRjJSaERkS21lMEFvYms1dTVyYmdZYWpRbjcvcnJFU3MrUG5TUmRWR1pzcEhsSUhmQzdLbmViUHZzeTZhYlJNVDhDbkFERjVzZi9xTG8wTVNaMnFaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b46d87-34b8-42d6-9557-0c23ea5708f1", "record_id": "flaws_cloudtrail:0000256:d8b46d87-34b8-42d6-9557-0c23ea5708f1", "row_index": 256, "timestamp": "2019-06-20T23:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b46d87-34b8-42d6-9557-0c23ea5708f1", "eventTime": "2019-06-20T23:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKK3hwNjZHYXI3TS94Nis4Ukh3MWRlNnFZTU1rN2Z1ek5WbE1qSVozRkZDTHdCUENLQnk1UXhzNFZYT01oTmdVWmIwS0JYMXJiQXVqeUJyaVdDZHpNSHEwQXJoNFphR0dKM2pEaUhkN1BVYTVCZmRnK0djNE5nOE8rQmlQSnZNdjVYTkFkd0ZXa3MzdFF5Umk4dmpIb0VPVHdOZjkxRlErZUladHFsekZ3cVQxaXZKYWtsYXdPVUJMTklxL0ZGQjZEREpUbThMV212MElGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "record_id": "flaws_cloudtrail:0000257:21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "row_index": 257, "timestamp": "2019-06-20T23:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bd5bf4-bdc3-477e-aa6b-2e6546bb59f3", "eventTime": "2019-06-20T23:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwODl5b0Y0cUJvaVNOVXBweWJKWGJGRDN1ZTRKaElzalRUbnc5SWZ3eGNHTnBIMElBWVdyQmwybHVpakJIOW83VFpSRi9TWkVKVHdmL0RMYU9oWER5K0hSWkJyRW8wSSt4MjZuUUo2Wk1ldVVFdkpMNjB4bWdEYm4vRjJSaERkS21lMEFvYms1dTVyYmdZYWpRbjcvcnJFU3MrUG5TUmRWR1pzcEhsSUhmQzdLbmViUHZzeTZhYlJNVDhDbkFERjVzZi9xTG8wTVNaMnFaUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b46d87-34b8-42d6-9557-0c23ea5708f1", "record_id": "flaws_cloudtrail:0000258:d8b46d87-34b8-42d6-9557-0c23ea5708f1", "row_index": 258, "timestamp": "2019-06-20T23:07:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b46d87-34b8-42d6-9557-0c23ea5708f1", "eventTime": "2019-06-20T23:07:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKK3hwNjZHYXI3TS94Nis4Ukh3MWRlNnFZTU1rN2Z1ek5WbE1qSVozRkZDTHdCUENLQnk1UXhzNFZYT01oTmdVWmIwS0JYMXJiQXVqeUJyaVdDZHpNSHEwQXJoNFphR0dKM2pEaUhkN1BVYTVCZmRnK0djNE5nOE8rQmlQSnZNdjVYTkFkd0ZXa3MzdFF5Umk4dmpIb0VPVHdOZjkxRlErZUladHFsekZ3cVQxaXZKYWtsYXdPVUJMTklxL0ZGQjZEREpUbThMV212MElGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16a280427-5178-49c8-a531-e9eac31829", "record_id": "flaws_cloudtrail:0000259:16a280427-5178-49c8-a531-e9eac31829", "row_index": 259, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16a280427-5178-49c8-a531-e9eac31829", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzT2RIRkxyYlVXK0FFK0lBOCtuK3dHcWpBeHYrNnZHVmdYdDRMS0hVUlpHQ2wvQnhBOHJxZFJ5RlFPb055UWppYTd1aXpMSGtYVzZyN3NHWXlYejFTcm9CSGdrd0Z6N0M3ZVJKbEV6cG9aZXVhdExBa0lnWlpYMC9Zajh1NDBGa3ZxdDZEVDRBVUsyckVIeFU4aW5nM29rVnlEa3lLMW1NYWt0M3VTeUppN0ZmTy9GY0dneFRYbjBmaTlZMW40cEY3ZHRoOEZuK012K3hkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "record_id": "flaws_cloudtrail:0000260:92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "row_index": 260, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYOTFtVmRjK1kyV2o5c3NhaURZUitTTjdEeEZpSE1rYzhQQVBxNDNzT1paYWNBKzNacUdyZTRxd2plWTI4WmRKMmY4cmFCY1RTM2dsZytvS0FJWEt6cEN2KzlnNVpNV2JkSEM2eXpTNTF3RXNCQVBmSkRvU3VvMmRaUml6Rk9LMERRZXNoTU9tK1BLZDZ2ZS9IeXoveDhia2xlOGtnSGtsbU9yVUxrcDFmK2o3VGU0SmtvVS81dHYxMlZoZ1N3T2w4KzIxenFBRTN5ckJhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881d67ee-627f-4782-b20a-c113ea8aec73", "record_id": "flaws_cloudtrail:0000261:881d67ee-627f-4782-b20a-c113ea8aec73", "row_index": 261, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881d67ee-627f-4782-b20a-c113ea8aec73", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbE1pand1Ukp3WHUzSi8xcFNYRjZRYXdIMXhDY0hyQ2dJdHVOUDAxLzdRbzQrV2pSY2FKdmllak1Wd2c2KzRPdW0xMDlhbzF2TVI4K0xIaHphdGtmZ0ZPSkpwc0NCcGN6dnVVL3o1M2hoc2hGRDRRZHNTYTBVb2VGNFhqcjZoeTJkejZjeVlrd0U5VWlVZGNxalhRMWR4bkdCR0FmZCt3OW1BckMranVWdXFEOVBiemV1Z3VUMjBwdGFtOE85TmliZnh0ZWJLN29OTTV5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16a280427-5178-49c8-a531-e9eac31829", "record_id": "flaws_cloudtrail:0000262:16a280427-5178-49c8-a531-e9eac31829", "row_index": 262, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16a280427-5178-49c8-a531-e9eac31829", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzT2RIRkxyYlVXK0FFK0lBOCtuK3dHcWpBeHYrNnZHVmdYdDRMS0hVUlpHQ2wvQnhBOHJxZFJ5RlFPb055UWppYTd1aXpMSGtYVzZyN3NHWXlYejFTcm9CSGdrd0Z6N0M3ZVJKbEV6cG9aZXVhdExBa0lnWlpYMC9Zajh1NDBGa3ZxdDZEVDRBVUsyckVIeFU4aW5nM29rVnlEa3lLMW1NYWt0M3VTeUppN0ZmTy9GY0dneFRYbjBmaTlZMW40cEY3ZHRoOEZuK012K3hkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "record_id": "flaws_cloudtrail:0000263:92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "row_index": 263, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92f898b0-1b7c-48ff-a40c-3cc3da737ba4", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYOTFtVmRjK1kyV2o5c3NhaURZUitTTjdEeEZpSE1rYzhQQVBxNDNzT1paYWNBKzNacUdyZTRxd2plWTI4WmRKMmY4cmFCY1RTM2dsZytvS0FJWEt6cEN2KzlnNVpNV2JkSEM2eXpTNTF3RXNCQVBmSkRvU3VvMmRaUml6Rk9LMERRZXNoTU9tK1BLZDZ2ZS9IeXoveDhia2xlOGtnSGtsbU9yVUxrcDFmK2o3VGU0SmtvVS81dHYxMlZoZ1N3T2w4KzIxenFBRTN5ckJhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881d67ee-627f-4782-b20a-c113ea8aec73", "record_id": "flaws_cloudtrail:0000264:881d67ee-627f-4782-b20a-c113ea8aec73", "row_index": 264, "timestamp": "2019-06-20T23:07:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881d67ee-627f-4782-b20a-c113ea8aec73", "eventTime": "2019-06-20T23:07:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTbE1pand1Ukp3WHUzSi8xcFNYRjZRYXdIMXhDY0hyQ2dJdHVOUDAxLzdRbzQrV2pSY2FKdmllak1Wd2c2KzRPdW0xMDlhbzF2TVI4K0xIaHphdGtmZ0ZPSkpwc0NCcGN6dnVVL3o1M2hoc2hGRDRRZHNTYTBVb2VGNFhqcjZoeTJkejZjeVlrd0U5VWlVZGNxalhRMWR4bkdCR0FmZCt3OW1BckMranVWdXFEOVBiemV1Z3VUMjBwdGFtOE85TmliZnh0ZWJLN29OTTV5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cdd93dc-a568-437d-8f49-7ced919f175c", "record_id": "flaws_cloudtrail:0000265:3cdd93dc-a568-437d-8f49-7ced919f175c", "row_index": 265, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cdd93dc-a568-437d-8f49-7ced919f175c", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Nmd1NEl1Skk5Z1JFR1BENzhpUldWQkZ0d1AxSStvek5RK2JnU2ZPNExNcU9HSXk2ZklwdGFiVWpUeThSWWtUOWFUZG50alQwNFQyRVBYSEZINDEwVzlBb2YvazRyNzhPcm9RYjlRM1hKQmEyMFhyMXNxSGlXTWp5TS9DTVRWT25neit6VFc2SWRBdFlMTXd1aU9IcSs1enM0T1ZNckpjemkzOFAyNmxFVUc5Tm5hQTM4SWxNZ2VZekZ3Y2h6TzVveFM3NkQrQnd2L0taQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091500d-20dd-4e3e-b897-242bb0d702dc", "record_id": "flaws_cloudtrail:0000266:091500d-20dd-4e3e-b897-242bb0d702dc", "row_index": 266, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091500d-20dd-4e3e-b897-242bb0d702dc", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmb043cDFJWUhKcGlkRjZQSFpNVkVJYUhZUExJL3dCZTRLcXVhNWI4Z0cxYUtmUEdpaWJlV0YrZWdJYzU2M1UwaFdEZ0d1SDlES24wL2dJeUtYcC9XVkgzSjdQVXc1ekFjOVNvcXlDaVlDY1Fwd2p1RGIzM0tHOG5FaTBLdXRGSzI3V2xpSkxhY24vNjVPbmJicE9WbUFIN2djR1M0QXcxZW1NaTA5MjVhTXJrT3Y1ZWhqdFhTN2Q4aGVQcFkvTDYvckdldisvR1NtU0Rvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e062e44-eb66-414a-b589-38ad0ddf2e87", "record_id": "flaws_cloudtrail:0000267:5e062e44-eb66-414a-b589-38ad0ddf2e87", "row_index": 267, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e062e44-eb66-414a-b589-38ad0ddf2e87", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSUR1dHRrTUt0bnE1MU5FVU5YL2w5MmpIbWtGcHM0OFQxUFpHblEzV0ExZUVOQjJ3SVZ5TFpKOUFNY0hOTXRGaVRJUWNaVmhwOC9JaDNFS0p0aTJGMDlwdWdMb25UVSt5c3h5UWpMakFHTzdHTVFtWnJhenFheHFmUWlTSS94RGJEb1RmSlRCSFlScGJKdWRGMHIvMHRjOEZpRG9FL21HaFRRV3U0T1R4ZmdIbnFiY2NwWHlVVEhOa3pvVjZ4Vm1oN2JHQ1pGYkliUzB6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cdd93dc-a568-437d-8f49-7ced919f175c", "record_id": "flaws_cloudtrail:0000268:3cdd93dc-a568-437d-8f49-7ced919f175c", "row_index": 268, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cdd93dc-a568-437d-8f49-7ced919f175c", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1Nmd1NEl1Skk5Z1JFR1BENzhpUldWQkZ0d1AxSStvek5RK2JnU2ZPNExNcU9HSXk2ZklwdGFiVWpUeThSWWtUOWFUZG50alQwNFQyRVBYSEZINDEwVzlBb2YvazRyNzhPcm9RYjlRM1hKQmEyMFhyMXNxSGlXTWp5TS9DTVRWT25neit6VFc2SWRBdFlMTXd1aU9IcSs1enM0T1ZNckpjemkzOFAyNmxFVUc5Tm5hQTM4SWxNZ2VZekZ3Y2h6TzVveFM3NkQrQnd2L0taQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091500d-20dd-4e3e-b897-242bb0d702dc", "record_id": "flaws_cloudtrail:0000269:091500d-20dd-4e3e-b897-242bb0d702dc", "row_index": 269, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091500d-20dd-4e3e-b897-242bb0d702dc", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmb043cDFJWUhKcGlkRjZQSFpNVkVJYUhZUExJL3dCZTRLcXVhNWI4Z0cxYUtmUEdpaWJlV0YrZWdJYzU2M1UwaFdEZ0d1SDlES24wL2dJeUtYcC9XVkgzSjdQVXc1ekFjOVNvcXlDaVlDY1Fwd2p1RGIzM0tHOG5FaTBLdXRGSzI3V2xpSkxhY24vNjVPbmJicE9WbUFIN2djR1M0QXcxZW1NaTA5MjVhTXJrT3Y1ZWhqdFhTN2Q4aGVQcFkvTDYvckdldisvR1NtU0Rvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e062e44-eb66-414a-b589-38ad0ddf2e87", "record_id": "flaws_cloudtrail:0000270:5e062e44-eb66-414a-b589-38ad0ddf2e87", "row_index": 270, "timestamp": "2019-06-20T23:07:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e062e44-eb66-414a-b589-38ad0ddf2e87", "eventTime": "2019-06-20T23:07:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUSUR1dHRrTUt0bnE1MU5FVU5YL2w5MmpIbWtGcHM0OFQxUFpHblEzV0ExZUVOQjJ3SVZ5TFpKOUFNY0hOTXRGaVRJUWNaVmhwOC9JaDNFS0p0aTJGMDlwdWdMb25UVSt5c3h5UWpMakFHTzdHTVFtWnJhenFheHFmUWlTSS94RGJEb1RmSlRCSFlScGJKdWRGMHIvMHRjOEZpRG9FL21HaFRRV3U0T1R4ZmdIbnFiY2NwWHlVVEhOa3pvVjZ4Vm1oN2JHQ1pGYkliUzB6QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e75cea6-ceb6-44e8-af69-69fd138825c38", "record_id": "flaws_cloudtrail:0000271:4e75cea6-ceb6-44e8-af69-69fd138825c38", "row_index": 271, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e75cea6-ceb6-44e8-af69-69fd138825c38", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Q240anZHUTk1ekg5L3h4YzFTNDRrRWxtTktvYy81SEtncytNbXVmOUFUbjNudXBOaDQ2aloxejFoODM3b3VoQllMTXdDRENWMDhOakhnL21IdDJGajE5bjluREFiNkVxN2tod0xmcFRML21POUdDak43QUh0WmpIc3R4T1ZYUGZ3a1dDRjNwekhCMEJNa3dobmtmQi92K25VQmNMRmd5V2NjQmZGVEpKdkxCeGJXWk82R0RFbG1XdHNzZzFXMTR1TTlrb1lrSmVlUlBHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe68561-dbba-4e19-a808-6f80a84ce370", "record_id": "flaws_cloudtrail:0000272:bbe68561-dbba-4e19-a808-6f80a84ce370", "row_index": 272, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe68561-dbba-4e19-a808-6f80a84ce370", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQcXd3Zk1kVVozcVUvem9TY2t4NUFQVXRaekNONTNueHBVWVVzOGJaVjNBQ1poRDBqZUtFSHhGcGZPOWI3NWpVMnhNZkhESGt6eE5lcGttTTg0Wm0yditEajBURkppSE5pQlVncVNUeGkrVFBZaUFadFk3M1pvME9xcS9DNXgwNzU1WWk2MDR0NkRWS25PWnNNRG4xYkxYMnBvbnp3d1hXQkVwdmVrYjBhVFdVVk9YcUpYZ0dQK1EvMTlSWnlpSVI5aWFkSzA5NlUzMjRjdjlQNkhMMFIvYXNleG1hRUFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e8b703-fcbc-422f-919d-a0fa147145d9", "record_id": "flaws_cloudtrail:0000273:36e8b703-fcbc-422f-919d-a0fa147145d9", "row_index": 273, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e8b703-fcbc-422f-919d-a0fa147145d9", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuUGpaak9oMnorc0orQ1ZBWTA3ZDU2S0hVK1N3NUxXMi9FVTJMMnoyZldLR2VCNVZyQ2NkVjl3cHpCbk5WcTQwK2NjSlJFVXF4NmQ2MzYxVHBBY3B4QUVpMFJzV2NvdDVQZEo1YnBYMUhPLzVNbHkwd3lTY0JNWkVJTTZIRWJoUDk2Z1NjTzJudHVlMjh0Q2g4a1RPQTdjTEFzclJLNWhoL3ZUNWdINytCdmpRMk43bDRJS0tkditUZHNsc3N3Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "record_id": "flaws_cloudtrail:0000274:cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "row_index": 274, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaWpRZERGL2xqYkh2TU55VXAxaE1nUkQrdlVYdDVOUzdDR1Z5Snc3SC9sMWQyeVltZ3Z4dlJOTDRKWlBHRDBacldhU21aT1pQN2kxQUEyYzNndTVQS1V5emEvMjUyaHQrRHNWSXVwQW1VakxRS1g4bXBLTFZhU1NTek9DSjM5Z3pIN25uTmFSaHgydFpPYTlBcE8rY1U4dGlEVnc5M3JYclVxR21DT0lGWEl5NHZFYmFEQlkxSHRDVm96V2VhRmk5WUxRVlVZZ0c1SGM3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e75cea6-ceb6-44e8-af69-69fd138825c38", "record_id": "flaws_cloudtrail:0000275:4e75cea6-ceb6-44e8-af69-69fd138825c38", "row_index": 275, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e75cea6-ceb6-44e8-af69-69fd138825c38", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Q240anZHUTk1ekg5L3h4YzFTNDRrRWxtTktvYy81SEtncytNbXVmOUFUbjNudXBOaDQ2aloxejFoODM3b3VoQllMTXdDRENWMDhOakhnL21IdDJGajE5bjluREFiNkVxN2tod0xmcFRML21POUdDak43QUh0WmpIc3R4T1ZYUGZ3a1dDRjNwekhCMEJNa3dobmtmQi92K25VQmNMRmd5V2NjQmZGVEpKdkxCeGJXWk82R0RFbG1XdHNzZzFXMTR1TTlrb1lrSmVlUlBHUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe68561-dbba-4e19-a808-6f80a84ce370", "record_id": "flaws_cloudtrail:0000276:bbe68561-dbba-4e19-a808-6f80a84ce370", "row_index": 276, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe68561-dbba-4e19-a808-6f80a84ce370", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQcXd3Zk1kVVozcVUvem9TY2t4NUFQVXRaekNONTNueHBVWVVzOGJaVjNBQ1poRDBqZUtFSHhGcGZPOWI3NWpVMnhNZkhESGt6eE5lcGttTTg0Wm0yditEajBURkppSE5pQlVncVNUeGkrVFBZaUFadFk3M1pvME9xcS9DNXgwNzU1WWk2MDR0NkRWS25PWnNNRG4xYkxYMnBvbnp3d1hXQkVwdmVrYjBhVFdVVk9YcUpYZ0dQK1EvMTlSWnlpSVI5aWFkSzA5NlUzMjRjdjlQNkhMMFIvYXNleG1hRUFFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e8b703-fcbc-422f-919d-a0fa147145d9", "record_id": "flaws_cloudtrail:0000277:36e8b703-fcbc-422f-919d-a0fa147145d9", "row_index": 277, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e8b703-fcbc-422f-919d-a0fa147145d9", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuUGpaak9oMnorc0orQ1ZBWTA3ZDU2S0hVK1N3NUxXMi9FVTJMMnoyZldLR2VCNVZyQ2NkVjl3cHpCbk5WcTQwK2NjSlJFVXF4NmQ2MzYxVHBBY3B4QUVpMFJzV2NvdDVQZEo1YnBYMUhPLzVNbHkwd3lTY0JNWkVJTTZIRWJoUDk2Z1NjTzJudHVlMjh0Q2g4a1RPQTdjTEFzclJLNWhoL3ZUNWdINytCdmpRMk43bDRJS0tkditUZHNsc3N3Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "record_id": "flaws_cloudtrail:0000278:cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "row_index": 278, "timestamp": "2019-06-20T23:07:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0fe57c-caf9-4111-b3dc-15f84781b5e8", "eventTime": "2019-06-20T23:07:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaWpRZERGL2xqYkh2TU55VXAxaE1nUkQrdlVYdDVOUzdDR1Z5Snc3SC9sMWQyeVltZ3Z4dlJOTDRKWlBHRDBacldhU21aT1pQN2kxQUEyYzNndTVQS1V5emEvMjUyaHQrRHNWSXVwQW1VakxRS1g4bXBLTFZhU1NTek9DSjM5Z3pIN25uTmFSaHgydFpPYTlBcE8rY1U4dGlEVnc5M3JYclVxR21DT0lGWEl5NHZFYmFEQlkxSHRDVm96V2VhRmk5WUxRVlVZZ0c1SGM3Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9a529b-ddd3-4779-99f7-6cca936f9c19", "record_id": "flaws_cloudtrail:0000279:ce9a529b-ddd3-4779-99f7-6cca936f9c19", "row_index": 279, "timestamp": "2019-06-20T23:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9a529b-ddd3-4779-99f7-6cca936f9c19", "eventTime": "2019-06-20T23:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJidzdReklLcElId0thVTU3Q1RqeWZ1emZIL1AySksyUmVoejBUN1QrN2UzZzJXNm9RQllONGk4cmYxU0xQN1hxSmxNallYVHRYa3YrNGdkdnRoVGUzUkJQajNPWnI2aVNRcU9zMjNWalJMQ0VTYXBhWEhybXNUTktpV3U0S1U4bHBLQ2w3V1lYcFgzNlRwNDVEZnROcHFXb2g3eEtQQ1kxdXRkbVYvMG80OVA4Z1RNNVBnYjFtc040MW5XMzRDaUw0REpqZnkwZklTWkh2N0hHU3hCbVpMVUJNRUlsZGhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fd0f36-def9-4e66-affa-41c5357ff8f3", "record_id": "flaws_cloudtrail:0000280:09fd0f36-def9-4e66-affa-41c5357ff8f3", "row_index": 280, "timestamp": "2019-06-20T23:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fd0f36-def9-4e66-affa-41c5357ff8f3", "eventTime": "2019-06-20T23:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Q1dJeEQzVG8zTG9mNGdaRzhkRXV4Wjg1ZXltbTFuMWY5MkJBZERvK3lyVnJzMEJsT2ZBQVZ6bDlyYjVJQ0tFZ09vVy8zTHA3WjJZRnBWb2xIOVdtN0Z1SUF0dGE3TWNDZm1BWjB4K1hOUXlEYjJOVWQ5eTQwMXJsSVBaY1N1Ym8wVDNKUjJSaVUrM291UVk1d1ZzZFpsdXVwWURMYS9BbEtFb1RqeGFieGh3WHUyZ2h6TFNTdytXcjNmaGJTVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9a529b-ddd3-4779-99f7-6cca936f9c19", "record_id": "flaws_cloudtrail:0000281:ce9a529b-ddd3-4779-99f7-6cca936f9c19", "row_index": 281, "timestamp": "2019-06-20T23:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9a529b-ddd3-4779-99f7-6cca936f9c19", "eventTime": "2019-06-20T23:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJidzdReklLcElId0thVTU3Q1RqeWZ1emZIL1AySksyUmVoejBUN1QrN2UzZzJXNm9RQllONGk4cmYxU0xQN1hxSmxNallYVHRYa3YrNGdkdnRoVGUzUkJQajNPWnI2aVNRcU9zMjNWalJMQ0VTYXBhWEhybXNUTktpV3U0S1U4bHBLQ2w3V1lYcFgzNlRwNDVEZnROcHFXb2g3eEtQQ1kxdXRkbVYvMG80OVA4Z1RNNVBnYjFtc040MW5XMzRDaUw0REpqZnkwZklTWkh2N0hHU3hCbVpMVUJNRUlsZGhJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fd0f36-def9-4e66-affa-41c5357ff8f3", "record_id": "flaws_cloudtrail:0000282:09fd0f36-def9-4e66-affa-41c5357ff8f3", "row_index": 282, "timestamp": "2019-06-20T23:07:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fd0f36-def9-4e66-affa-41c5357ff8f3", "eventTime": "2019-06-20T23:07:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2Q1dJeEQzVG8zTG9mNGdaRzhkRXV4Wjg1ZXltbTFuMWY5MkJBZERvK3lyVnJzMEJsT2ZBQVZ6bDlyYjVJQ0tFZ09vVy8zTHA3WjJZRnBWb2xIOVdtN0Z1SUF0dGE3TWNDZm1BWjB4K1hOUXlEYjJOVWQ5eTQwMXJsSVBaY1N1Ym8wVDNKUjJSaVUrM291UVk1d1ZzZFpsdXVwWURMYS9BbEtFb1RqeGFieGh3WHUyZ2h6TFNTdytXcjNmaGJTVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3e9bda5-c54d-4265-85dc-bf7bd937a275", "record_id": "flaws_cloudtrail:0000283:b3e9bda5-c54d-4265-85dc-bf7bd937a275", "row_index": 283, "timestamp": "2019-06-20T23:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3e9bda5-c54d-4265-85dc-bf7bd937a275", "eventTime": "2019-06-20T23:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMck40aVBaZGZXekVEK05xdVN5ZDY2cWJrbHpLUTBTa1BXMXRsNi9kRzh4OEIvWlh4emw5SHhXdkVwL3FhcjgrSmY5UEhyak1QbUpZQjg4RFFwKytTMmZIeVVKTi9QOGp1bDl3LytUZjVpTll1QXZVU3JLYUg4UlI1b0tBZWU3ZEZJeHlYblZFTVJqNlE5bGJPTUk5ZFF4OU5HTDFWMkp1QzVGalBtNisyQU5qK2NPN3cwb2xFYlBFSlVFWFlHdnExRGFrSjFKSVJ6NGpKR0tMbktybmxUWGMrWHNVVU9BPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d42b81a-4058-485a-ba7a-eaac0d02f10f", "record_id": "flaws_cloudtrail:0000284:6d42b81a-4058-485a-ba7a-eaac0d02f10f", "row_index": 284, "timestamp": "2019-06-20T23:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d42b81a-4058-485a-ba7a-eaac0d02f10f", "eventTime": "2019-06-20T23:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCZW9ZMEV5TmJWbjQ3cFNRc3lYbHI1dTZSNTJYODBlYU1QRWJRajlXR3NUZExBVUNmSm1CMWhxb2FWZVhMT25FYVA5bDFWaXJPM3NWMDMyOHdSU3RHd1I4MVl5TUt4U1ZCdUcrL1NzYjI4VlQ3ODA5RWtiWk54NTJiSXlyeUc0WXk0N3VhVkR1RldlSjZnNUhGcFlzb3VUVklMRVIwaGxEemJwMkdJTnVNbHdwa0VCOHJ6YThmWnc1SzFocWxPOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3e9bda5-c54d-4265-85dc-bf7bd937a275", "record_id": "flaws_cloudtrail:0000285:b3e9bda5-c54d-4265-85dc-bf7bd937a275", "row_index": 285, "timestamp": "2019-06-20T23:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3e9bda5-c54d-4265-85dc-bf7bd937a275", "eventTime": "2019-06-20T23:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMck40aVBaZGZXekVEK05xdVN5ZDY2cWJrbHpLUTBTa1BXMXRsNi9kRzh4OEIvWlh4emw5SHhXdkVwL3FhcjgrSmY5UEhyak1QbUpZQjg4RFFwKytTMmZIeVVKTi9QOGp1bDl3LytUZjVpTll1QXZVU3JLYUg4UlI1b0tBZWU3ZEZJeHlYblZFTVJqNlE5bGJPTUk5ZFF4OU5HTDFWMkp1QzVGalBtNisyQU5qK2NPN3cwb2xFYlBFSlVFWFlHdnExRGFrSjFKSVJ6NGpKR0tMbktybmxUWGMrWHNVVU9BPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d42b81a-4058-485a-ba7a-eaac0d02f10f", "record_id": "flaws_cloudtrail:0000286:6d42b81a-4058-485a-ba7a-eaac0d02f10f", "row_index": 286, "timestamp": "2019-06-20T23:07:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d42b81a-4058-485a-ba7a-eaac0d02f10f", "eventTime": "2019-06-20T23:07:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCZW9ZMEV5TmJWbjQ3cFNRc3lYbHI1dTZSNTJYODBlYU1QRWJRajlXR3NUZExBVUNmSm1CMWhxb2FWZVhMT25FYVA5bDFWaXJPM3NWMDMyOHdSU3RHd1I4MVl5TUt4U1ZCdUcrL1NzYjI4VlQ3ODA5RWtiWk54NTJiSXlyeUc0WXk0N3VhVkR1RldlSjZnNUhGcFlzb3VUVklMRVIwaGxEemJwMkdJTnVNbHdwa0VCOHJ6YThmWnc1SzFocWxPOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff87fc7c-532b-4dd2-83ba-88952a084ee6", "record_id": "flaws_cloudtrail:0000287:ff87fc7c-532b-4dd2-83ba-88952a084ee6", "row_index": 287, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff87fc7c-532b-4dd2-83ba-88952a084ee6", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bGd3RWkzbzBjRnRlUzFLOVdtM2dScFU5RHl2eUNoV1ZwRlYwaVEzM2JoMU5sUGxUTjVJVE5VakxtREhYTEliODlsS0ZOd0NCT04xZWJEZkR4azl6NTYvSmZYSUNlSlhjWHI2dC9ob2lMb2libWsxNDQ1SG4vMDU2eHE0bTZUcDdxNXBveFZSQm5ZbFUwRzY4VHg1ZlYzejNLdnRLenNMSDdlVUNEWUxFcG5EZmtOVDVoU2pFdlpyMnkrbDF3Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "record_id": "flaws_cloudtrail:0000288:84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "row_index": 288, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWVJDN2oxQXZkT1psMkMwcUpKblI3UnNncjd2MlFpdncvczRkSTQvMlZDVEkzdlRvRXZ2YkoyTlgrMTJuQmJyNk1CRnBYaStUY1hWaTdlTnlxU3hlVGd3Sm1UOElnQ2hoS1RybmIzNXZIaktsdUJuTm1EdElJdU90Rk8wSEErc1VjU3gwaFZVdDB0aTBGaHJCRXpKdE1KZTNxOXI2RVdZUC9uMyt6V0tkVXhVTnlMWkMzelN5a2VDN3pPQ0QvK2lOSEoyMEN2WkdHUmNhaXZ5NUtNL3N6N0hpRHRpRTlFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ae877450-27e3-4310-8cd4-2885f1ed73d6", "record_id": "flaws_cloudtrail:0000289:0ae877450-27e3-4310-8cd4-2885f1ed73d6", "row_index": 289, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ae877450-27e3-4310-8cd4-2885f1ed73d6", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3aklXOVYrTEI4TmRMRjliVUhBemwyeklLeWdMUFVPNFQ5NzZGZDFRaG5EMVY4dmk1SkhuNnhtL0VCZk91cURMYWIyRmozQS94NkZwQzVQclMzWEtHRFNGMU5UbjZYTnFSdWx1VDV3ZDg1RUJwNlBnZ0wrd2s0Z2Z4TGg1Lzdpc0JSY3ZLME1kcDJvN0tuU1hLSkVDVCtlZkd6L2ZUSkNBMHNzRjdkK0xsSXFlOWVFUW5GdENFNW5YeVVvVk9CbXlLRTFTdldHUVhRMDNDODhQQitXZTRlUXNHWWs3dDY0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "record_id": "flaws_cloudtrail:0000290:15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "row_index": 290, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJibTVRVkM3UGtCeEVyRlZGcTZhZ1U4a1JMdys5TDN4RVUrWi9IYzluMnFKNVpwMWt5eWpRcVhmdmJ6Y0x2R3UzeGpFZVdzYjFmcWtMRy9PZS85MGdKbnpaRTVCcEIzR0tzTW1zcXA1ZDVCNHU0dU8xaTdab2JDTEdKNzdqQzJVb3Q5M2ZQZnFFdWRKano4RXdVaFlrZTdwVHgzVkdVRk8yTlpyeURJRWFvR3NGQlA4bnVLdXoxSTlHcUhjTUw5SlpCckdvbWV1Z1VkbGhxRFRRSGVOVXJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff87fc7c-532b-4dd2-83ba-88952a084ee6", "record_id": "flaws_cloudtrail:0000291:ff87fc7c-532b-4dd2-83ba-88952a084ee6", "row_index": 291, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff87fc7c-532b-4dd2-83ba-88952a084ee6", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1bGd3RWkzbzBjRnRlUzFLOVdtM2dScFU5RHl2eUNoV1ZwRlYwaVEzM2JoMU5sUGxUTjVJVE5VakxtREhYTEliODlsS0ZOd0NCT04xZWJEZkR4azl6NTYvSmZYSUNlSlhjWHI2dC9ob2lMb2libWsxNDQ1SG4vMDU2eHE0bTZUcDdxNXBveFZSQm5ZbFUwRzY4VHg1ZlYzejNLdnRLenNMSDdlVUNEWUxFcG5EZmtOVDVoU2pFdlpyMnkrbDF3Zz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "record_id": "flaws_cloudtrail:0000292:84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "row_index": 292, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e41b41-e4c4-475a-95b4-e6e35c0b4ae1", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWVJDN2oxQXZkT1psMkMwcUpKblI3UnNncjd2MlFpdncvczRkSTQvMlZDVEkzdlRvRXZ2YkoyTlgrMTJuQmJyNk1CRnBYaStUY1hWaTdlTnlxU3hlVGd3Sm1UOElnQ2hoS1RybmIzNXZIaktsdUJuTm1EdElJdU90Rk8wSEErc1VjU3gwaFZVdDB0aTBGaHJCRXpKdE1KZTNxOXI2RVdZUC9uMyt6V0tkVXhVTnlMWkMzelN5a2VDN3pPQ0QvK2lOSEoyMEN2WkdHUmNhaXZ5NUtNL3N6N0hpRHRpRTlFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ae877450-27e3-4310-8cd4-2885f1ed73d6", "record_id": "flaws_cloudtrail:0000293:0ae877450-27e3-4310-8cd4-2885f1ed73d6", "row_index": 293, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ae877450-27e3-4310-8cd4-2885f1ed73d6", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3aklXOVYrTEI4TmRMRjliVUhBemwyeklLeWdMUFVPNFQ5NzZGZDFRaG5EMVY4dmk1SkhuNnhtL0VCZk91cURMYWIyRmozQS94NkZwQzVQclMzWEtHRFNGMU5UbjZYTnFSdWx1VDV3ZDg1RUJwNlBnZ0wrd2s0Z2Z4TGg1Lzdpc0JSY3ZLME1kcDJvN0tuU1hLSkVDVCtlZkd6L2ZUSkNBMHNzRjdkK0xsSXFlOWVFUW5GdENFNW5YeVVvVk9CbXlLRTFTdldHUVhRMDNDODhQQitXZTRlUXNHWWs3dDY0PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "record_id": "flaws_cloudtrail:0000294:15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "row_index": 294, "timestamp": "2019-06-20T23:07:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "240.252.161.77", "user_agent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e1f7de-4ccc-4c69-9b4b-d1a75206bd5a", "eventTime": "2019-06-20T23:07:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "240.252.161.77", "userAgent": "aws-cli/1.16.183 Python/3.6.8 Linux/4.19.0-kali1-amd64 botocore/1.12.173", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJibTVRVkM3UGtCeEVyRlZGcTZhZ1U4a1JMdys5TDN4RVUrWi9IYzluMnFKNVpwMWt5eWpRcVhmdmJ6Y0x2R3UzeGpFZVdzYjFmcWtMRy9PZS85MGdKbnpaRTVCcEIzR0tzTW1zcXA1ZDVCNHU0dU8xaTdab2JDTEdKNzdqQzJVb3Q5M2ZQZnFFdWRKano4RXdVaFlrZTdwVHgzVkdVRk8yTlpyeURJRWFvR3NGQlA4bnVLdXoxSTlHcUhjTUw5SlpCckdvbWV1Z1VkbGhxRFRRSGVOVXJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "009301bb7-7699-421c-a36e-cfac1d03cd64", "record_id": "flaws_cloudtrail:0000295:009301bb7-7699-421c-a36e-cfac1d03cd64", "row_index": 295, "timestamp": "2019-06-20T23:26:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "009301bb7-7699-421c-a36e-cfac1d03cd64", "eventTime": "2019-06-20T23:26:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL2CHIESGFVA6WBMC", "expiration": "Jun 21, 2019 6:02:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "009301bb7-7699-421c-a36e-cfac1d03cd64", "record_id": "flaws_cloudtrail:0000296:009301bb7-7699-421c-a36e-cfac1d03cd64", "row_index": 296, "timestamp": "2019-06-20T23:26:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "009301bb7-7699-421c-a36e-cfac1d03cd64", "eventTime": "2019-06-20T23:26:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL2CHIESGFVA6WBMC", "expiration": "Jun 21, 2019 6:02:12 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGAaCXVzLXdlc3QtMiJHMEUCIDW+Tup1v5Mfak5Yx+eqga6v22Xizq83+aWts1cWazuvAiEA+Vl1J2DFTlGl/3mLR66YqeIb5lzdZnSIMIxzY9QDf/Aq4wMImf//////////ARAAGgw5NzU0MjYyNjIwMjkiDG8V3XeStHbvXEVuGSq3A9RYATYYM4WSPHz4m5lm+AIptWc2QHKSGMSuVcAHtNwKYh/iDJ7F7dF431nwITpQ4AonbHCS38EkTg/EB+2ryLnYn7TX6mfRwGasMe0tfPVkF02PUJJ6MqjDFHTObqPisaxSdvx+uh8rbbS7K2FqAG1m5ghyb01RTnfo0nsOXr70gSXIzFylzwnGSO+082zB1M3qradQaOA7SGx5EyQxG30DCbPzjNeVX8W2zfXYrLqh7XiTjUx28uHtTj632KGd5SZakbTzn9+JCipFzUVGXHXb04EYa6XGJJPe4N9bdUK3ieyiiJKf2zwZAtKbnQzR4MJ41kj2gvOJ2sQjiByiGMiLORsaJjuTBv5l4rafegFbMSojKIICx7ZLVdapVU5ANdkCg47R25OFwcUJF28iuoQuOXlkmSQcjNZEEpE/FGSeNJ5Ftii67e29BXHrw4BYXedAm7ZiglEGjOepnfQpiXNFOzHIb70qJydHHs7MEtax2u6mmhm6sbKhfN9EFUiqCqeZKEEZxsstYrrGnL5y5ZXH2Pnluc87cXr6hqv4pSdHwfIjGNX2OSvvchXsWnsBWmv/Ani+TZcww6yw6AU6tAHGEMv3+alQk03wflW90S5Z0ANvmUB4+DudPbE4cFK2c063BVshm+arqKadFqbuPndJjplxrtbTwQpv6TMZpDAiG7CTGTEMfQxhlEMOWioX5nH72l1KsCnzDOhtfbwoYzSSXcwJChYzkdLbKXPbkPtdwkhgtDqrRgOtfSJH38uoMOGErSHMQt67T/vkDwKaxAtKhhOd4xNYMauzM2Ohx15JSldxkOTRV0jaQRvIBCheKZwd95g="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b495555-fd5f-4283-a9bf-59e9f3119ef6", "record_id": "flaws_cloudtrail:0000297:52b495555-fd5f-4283-a9bf-59e9f3119ef6", "row_index": 297, "timestamp": "2019-06-20T23:50:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b495555-fd5f-4283-a9bf-59e9f3119ef6", "eventTime": "2019-06-20T23:50:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9811e97-7a0e-4775-87bb-73119459bda9", "record_id": "flaws_cloudtrail:0000298:b9811e97-7a0e-4775-87bb-73119459bda9", "row_index": 298, "timestamp": "2019-06-20T23:50:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9811e97-7a0e-4775-87bb-73119459bda9", "eventTime": "2019-06-20T23:50:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b495555-fd5f-4283-a9bf-59e9f3119ef6", "record_id": "flaws_cloudtrail:0000299:52b495555-fd5f-4283-a9bf-59e9f3119ef6", "row_index": 299, "timestamp": "2019-06-20T23:50:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b495555-fd5f-4283-a9bf-59e9f3119ef6", "eventTime": "2019-06-20T23:50:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9811e97-7a0e-4775-87bb-73119459bda9", "record_id": "flaws_cloudtrail:0000300:b9811e97-7a0e-4775-87bb-73119459bda9", "row_index": 300, "timestamp": "2019-06-20T23:50:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9811e97-7a0e-4775-87bb-73119459bda9", "eventTime": "2019-06-20T23:50:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1da8bf-ea09-4108-bcca-356a88c6f556", "record_id": "flaws_cloudtrail:0000301:1a1da8bf-ea09-4108-bcca-356a88c6f556", "row_index": 301, "timestamp": "2019-06-20T23:55:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1da8bf-ea09-4108-bcca-356a88c6f556", "eventTime": "2019-06-20T23:55:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d361493-4f2b-4417-b913-2ecdc69966", "record_id": "flaws_cloudtrail:0000302:32d361493-4f2b-4417-b913-2ecdc69966", "row_index": 302, "timestamp": "2019-06-20T23:55:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d361493-4f2b-4417-b913-2ecdc69966", "eventTime": "2019-06-20T23:55:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1da8bf-ea09-4108-bcca-356a88c6f556", "record_id": "flaws_cloudtrail:0000303:1a1da8bf-ea09-4108-bcca-356a88c6f556", "row_index": 303, "timestamp": "2019-06-20T23:55:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1da8bf-ea09-4108-bcca-356a88c6f556", "eventTime": "2019-06-20T23:55:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d361493-4f2b-4417-b913-2ecdc69966", "record_id": "flaws_cloudtrail:0000304:32d361493-4f2b-4417-b913-2ecdc69966", "row_index": 304, "timestamp": "2019-06-20T23:55:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d361493-4f2b-4417-b913-2ecdc69966", "eventTime": "2019-06-20T23:55:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882126-473e-4774-8214-9fde7ebf56d3", "record_id": "flaws_cloudtrail:0000305:882126-473e-4774-8214-9fde7ebf56d3", "row_index": 305, "timestamp": "2019-06-21T00:02:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882126-473e-4774-8214-9fde7ebf56d3", "eventTime": "2019-06-21T00:02:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882126-473e-4774-8214-9fde7ebf56d3", "record_id": "flaws_cloudtrail:0000306:882126-473e-4774-8214-9fde7ebf56d3", "row_index": 306, "timestamp": "2019-06-21T00:02:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882126-473e-4774-8214-9fde7ebf56d3", "eventTime": "2019-06-21T00:02:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b965bab-0544-45c0-b3bc-e88a652adf66", "record_id": "flaws_cloudtrail:0000307:7b965bab-0544-45c0-b3bc-e88a652adf66", "row_index": 307, "timestamp": "2019-06-21T00:02:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b965bab-0544-45c0-b3bc-e88a652adf66", "eventTime": "2019-06-21T00:02:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b965bab-0544-45c0-b3bc-e88a652adf66", "record_id": "flaws_cloudtrail:0000308:7b965bab-0544-45c0-b3bc-e88a652adf66", "row_index": 308, "timestamp": "2019-06-21T00:02:50Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b965bab-0544-45c0-b3bc-e88a652adf66", "eventTime": "2019-06-21T00:02:50Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "record_id": "flaws_cloudtrail:0000309:317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "row_index": 309, "timestamp": "2019-06-21T00:05:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "eventTime": "2019-06-21T00:05:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac37b66c-b050-4bad-9d41-d2795bf29667", "record_id": "flaws_cloudtrail:0000310:ac37b66c-b050-4bad-9d41-d2795bf29667", "row_index": 310, "timestamp": "2019-06-21T00:05:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac37b66c-b050-4bad-9d41-d2795bf29667", "eventTime": "2019-06-21T00:05:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "record_id": "flaws_cloudtrail:0000311:317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "row_index": 311, "timestamp": "2019-06-21T00:05:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317bcca3-cdf2-4c31-b7a6-52f2ac4f4311", "eventTime": "2019-06-21T00:05:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac37b66c-b050-4bad-9d41-d2795bf29667", "record_id": "flaws_cloudtrail:0000312:ac37b66c-b050-4bad-9d41-d2795bf29667", "row_index": 312, "timestamp": "2019-06-21T00:05:09Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac37b66c-b050-4bad-9d41-d2795bf29667", "eventTime": "2019-06-21T00:05:09Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a71741d-d43d-4a96-86a8-759213bdad8cd", "record_id": "flaws_cloudtrail:0000313:a71741d-d43d-4a96-86a8-759213bdad8cd", "row_index": 313, "timestamp": "2019-06-21T00:08:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a71741d-d43d-4a96-86a8-759213bdad8cd", "eventTime": "2019-06-21T00:08:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "record_id": "flaws_cloudtrail:0000314:033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "row_index": 314, "timestamp": "2019-06-21T00:08:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "eventTime": "2019-06-21T00:08:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a71741d-d43d-4a96-86a8-759213bdad8cd", "record_id": "flaws_cloudtrail:0000315:a71741d-d43d-4a96-86a8-759213bdad8cd", "row_index": 315, "timestamp": "2019-06-21T00:08:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a71741d-d43d-4a96-86a8-759213bdad8cd", "eventTime": "2019-06-21T00:08:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "record_id": "flaws_cloudtrail:0000316:033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "row_index": 316, "timestamp": "2019-06-21T00:08:57Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033b24c7-b6e1-412c-acea-0ed28b9e5e6f", "eventTime": "2019-06-21T00:08:57Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "record_id": "flaws_cloudtrail:0000317:e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "row_index": 317, "timestamp": "2019-06-21T00:10:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "eventTime": "2019-06-21T00:10:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7ca3f2-789f-4650-9159-6acd886374c3b", "record_id": "flaws_cloudtrail:0000318:4c7ca3f2-789f-4650-9159-6acd886374c3b", "row_index": 318, "timestamp": "2019-06-21T00:10:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7ca3f2-789f-4650-9159-6acd886374c3b", "eventTime": "2019-06-21T00:10:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7ca3f2-789f-4650-9159-6acd886374c3b", "record_id": "flaws_cloudtrail:0000319:4c7ca3f2-789f-4650-9159-6acd886374c3b", "row_index": 319, "timestamp": "2019-06-21T00:10:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7ca3f2-789f-4650-9159-6acd886374c3b", "eventTime": "2019-06-21T00:10:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "record_id": "flaws_cloudtrail:0000320:e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "row_index": 320, "timestamp": "2019-06-21T00:10:25Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4b0cff8-f848-4b2c-b2c4-b7f4250a49c8", "eventTime": "2019-06-21T00:10:25Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ea0630c-e3c5-40d9-8637-f17770f0ba42", "record_id": "flaws_cloudtrail:0000321:9ea0630c-e3c5-40d9-8637-f17770f0ba42", "row_index": 321, "timestamp": "2019-06-21T00:12:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ea0630c-e3c5-40d9-8637-f17770f0ba42", "eventTime": "2019-06-21T00:12:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8822e046-5c95-4c5c-b230-e0ea850f4c7f", "record_id": "flaws_cloudtrail:0000322:8822e046-5c95-4c5c-b230-e0ea850f4c7f", "row_index": 322, "timestamp": "2019-06-21T00:12:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8822e046-5c95-4c5c-b230-e0ea850f4c7f", "eventTime": "2019-06-21T00:12:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ea0630c-e3c5-40d9-8637-f17770f0ba42", "record_id": "flaws_cloudtrail:0000323:9ea0630c-e3c5-40d9-8637-f17770f0ba42", "row_index": 323, "timestamp": "2019-06-21T00:12:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ea0630c-e3c5-40d9-8637-f17770f0ba42", "eventTime": "2019-06-21T00:12:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8822e046-5c95-4c5c-b230-e0ea850f4c7f", "record_id": "flaws_cloudtrail:0000324:8822e046-5c95-4c5c-b230-e0ea850f4c7f", "row_index": 324, "timestamp": "2019-06-21T00:12:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8822e046-5c95-4c5c-b230-e0ea850f4c7f", "eventTime": "2019-06-21T00:12:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "record_id": "flaws_cloudtrail:0000325:fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "row_index": 325, "timestamp": "2019-06-21T00:17:07Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "eventTime": "2019-06-21T00:17:07Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "record_id": "flaws_cloudtrail:0000326:6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "row_index": 326, "timestamp": "2019-06-21T00:17:07Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "eventTime": "2019-06-21T00:17:07Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "record_id": "flaws_cloudtrail:0000327:fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "row_index": 327, "timestamp": "2019-06-21T00:17:07Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe195fc1-6b4e-4d69-a8eb-c894af6f93be", "eventTime": "2019-06-21T00:17:07Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "record_id": "flaws_cloudtrail:0000328:6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "row_index": 328, "timestamp": "2019-06-21T00:17:07Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1143, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7d5b14-bf4a-4acb-b65d-0f7d65b077a9", "eventTime": "2019-06-21T00:17:07Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9713e14-690c-4c1d-9f14-43526fc7", "record_id": "flaws_cloudtrail:0000329:f9713e14-690c-4c1d-9f14-43526fc7", "row_index": 329, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9713e14-690c-4c1d-9f14-43526fc7", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "record_id": "flaws_cloudtrail:0000330:9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "row_index": 330, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993901-85ad-4aeb-8037-f523d43845b5", "record_id": "flaws_cloudtrail:0000331:993901-85ad-4aeb-8037-f523d43845b5", "row_index": 331, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993901-85ad-4aeb-8037-f523d43845b5", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bea7134-2941-45fc-b68f-dc27415824e7", "record_id": "flaws_cloudtrail:0000332:0bea7134-2941-45fc-b68f-dc27415824e7", "row_index": 332, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bea7134-2941-45fc-b68f-dc27415824e7", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "record_id": "flaws_cloudtrail:0000333:8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "row_index": 333, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fa17334-bd78-4322-b59c-a2a044ddba41", "record_id": "flaws_cloudtrail:0000334:1fa17334-bd78-4322-b59c-a2a044ddba41", "row_index": 334, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fa17334-bd78-4322-b59c-a2a044ddba41", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9713e14-690c-4c1d-9f14-43526fc7", "record_id": "flaws_cloudtrail:0000335:f9713e14-690c-4c1d-9f14-43526fc7", "row_index": 335, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9713e14-690c-4c1d-9f14-43526fc7", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "record_id": "flaws_cloudtrail:0000336:9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "row_index": 336, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3d9e08-e5c8-4635-b98c-1495215ae5ec", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993901-85ad-4aeb-8037-f523d43845b5", "record_id": "flaws_cloudtrail:0000337:993901-85ad-4aeb-8037-f523d43845b5", "row_index": 337, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993901-85ad-4aeb-8037-f523d43845b5", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bea7134-2941-45fc-b68f-dc27415824e7", "record_id": "flaws_cloudtrail:0000338:0bea7134-2941-45fc-b68f-dc27415824e7", "row_index": 338, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bea7134-2941-45fc-b68f-dc27415824e7", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "record_id": "flaws_cloudtrail:0000339:8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "row_index": 339, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afc0288-70cf-41c9-9b9a-c6d3f2d615a9", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fa17334-bd78-4322-b59c-a2a044ddba41", "record_id": "flaws_cloudtrail:0000340:1fa17334-bd78-4322-b59c-a2a044ddba41", "row_index": 340, "timestamp": "2019-06-21T00:17:08Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fa17334-bd78-4322-b59c-a2a044ddba41", "eventTime": "2019-06-21T00:17:08Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "record_id": "flaws_cloudtrail:0000341:5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "row_index": 341, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aeb3dde-b607-4d7f-b59c-15196549a4d4", "record_id": "flaws_cloudtrail:0000342:5aeb3dde-b607-4d7f-b59c-15196549a4d4", "row_index": 342, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aeb3dde-b607-4d7f-b59c-15196549a4d4", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56d193153-807f-4f54-a6e1-6788cf2518ab", "record_id": "flaws_cloudtrail:0000343:56d193153-807f-4f54-a6e1-6788cf2518ab", "row_index": 343, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56d193153-807f-4f54-a6e1-6788cf2518ab", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834e5a8b-43bd-4721-bb54-fdebf2aba255", "record_id": "flaws_cloudtrail:0000344:834e5a8b-43bd-4721-bb54-fdebf2aba255", "row_index": 344, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834e5a8b-43bd-4721-bb54-fdebf2aba255", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5589c5dd-8919-497e-9f46-0cd18b08bde2", "record_id": "flaws_cloudtrail:0000345:5589c5dd-8919-497e-9f46-0cd18b08bde2", "row_index": 345, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5589c5dd-8919-497e-9f46-0cd18b08bde2", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "record_id": "flaws_cloudtrail:0000346:5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "row_index": 346, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "record_id": "flaws_cloudtrail:0000347:5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "row_index": 347, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd7e559-8dfb-4539-9ec8-ef57de4e65b3", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aeb3dde-b607-4d7f-b59c-15196549a4d4", "record_id": "flaws_cloudtrail:0000348:5aeb3dde-b607-4d7f-b59c-15196549a4d4", "row_index": 348, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1156, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aeb3dde-b607-4d7f-b59c-15196549a4d4", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56d193153-807f-4f54-a6e1-6788cf2518ab", "record_id": "flaws_cloudtrail:0000349:56d193153-807f-4f54-a6e1-6788cf2518ab", "row_index": 349, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56d193153-807f-4f54-a6e1-6788cf2518ab", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "834e5a8b-43bd-4721-bb54-fdebf2aba255", "record_id": "flaws_cloudtrail:0000350:834e5a8b-43bd-4721-bb54-fdebf2aba255", "row_index": 350, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "834e5a8b-43bd-4721-bb54-fdebf2aba255", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5589c5dd-8919-497e-9f46-0cd18b08bde2", "record_id": "flaws_cloudtrail:0000351:5589c5dd-8919-497e-9f46-0cd18b08bde2", "row_index": 351, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5589c5dd-8919-497e-9f46-0cd18b08bde2", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "record_id": "flaws_cloudtrail:0000352:5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "row_index": 352, "timestamp": "2019-06-21T00:17:09Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2276a1-df7a-41d8-8de7-0e24b6419cb9", "eventTime": "2019-06-21T00:17:09Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8b3c32-d398-44e2-935a-a59decc4d7bf", "record_id": "flaws_cloudtrail:0000353:1e8b3c32-d398-44e2-935a-a59decc4d7bf", "row_index": 353, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8b3c32-d398-44e2-935a-a59decc4d7bf", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "record_id": "flaws_cloudtrail:0000354:42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "row_index": 354, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "record_id": "flaws_cloudtrail:0000355:7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "row_index": 355, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "record_id": "flaws_cloudtrail:0000356:9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "row_index": 356, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "495d22ef-a46a-421c-88df-07b2a7091874", "record_id": "flaws_cloudtrail:0000357:495d22ef-a46a-421c-88df-07b2a7091874", "row_index": 357, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "495d22ef-a46a-421c-88df-07b2a7091874", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "record_id": "flaws_cloudtrail:0000358:c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "row_index": 358, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8b3c32-d398-44e2-935a-a59decc4d7bf", "record_id": "flaws_cloudtrail:0000359:1e8b3c32-d398-44e2-935a-a59decc4d7bf", "row_index": 359, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8b3c32-d398-44e2-935a-a59decc4d7bf", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "record_id": "flaws_cloudtrail:0000360:42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "row_index": 360, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d08bad-9c67-442a-9ad7-8aba62a2ecd0", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "record_id": "flaws_cloudtrail:0000361:7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "row_index": 361, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7804f0d8-7bc1-49d9-aad8-2f531002c6f4", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "record_id": "flaws_cloudtrail:0000362:9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "row_index": 362, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f2b9f93-edc0-4bf5-bdfb-cc97307e0484", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "495d22ef-a46a-421c-88df-07b2a7091874", "record_id": "flaws_cloudtrail:0000363:495d22ef-a46a-421c-88df-07b2a7091874", "row_index": 363, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "495d22ef-a46a-421c-88df-07b2a7091874", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "record_id": "flaws_cloudtrail:0000364:c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "row_index": 364, "timestamp": "2019-06-21T00:17:10Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c688d5c8-6812-4e0e-8354-a4d19c0f5b66", "eventTime": "2019-06-21T00:17:10Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6010ea34-864d-4dd6-92a5-800ef029e740", "record_id": "flaws_cloudtrail:0000365:6010ea34-864d-4dd6-92a5-800ef029e740", "row_index": 365, "timestamp": "2019-06-21T00:17:11Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6010ea34-864d-4dd6-92a5-800ef029e740", "eventTime": "2019-06-21T00:17:11Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6010ea34-864d-4dd6-92a5-800ef029e740", "record_id": "flaws_cloudtrail:0000366:6010ea34-864d-4dd6-92a5-800ef029e740", "row_index": 366, "timestamp": "2019-06-21T00:17:11Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 914, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6010ea34-864d-4dd6-92a5-800ef029e740", "eventTime": "2019-06-21T00:17:11Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c044b3-5020-405a-8010-1c926073e65db", "record_id": "flaws_cloudtrail:0000367:07c044b3-5020-405a-8010-1c926073e65db", "row_index": 367, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c044b3-5020-405a-8010-1c926073e65db", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "record_id": "flaws_cloudtrail:0000368:dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "row_index": 368, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "record_id": "flaws_cloudtrail:0000369:3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "row_index": 369, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0058ae46-76bb-486c-873a-172fd64d67a7", "record_id": "flaws_cloudtrail:0000370:0058ae46-76bb-486c-873a-172fd64d67a7", "row_index": 370, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0058ae46-76bb-486c-873a-172fd64d67a7", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c044b3-5020-405a-8010-1c926073e65db", "record_id": "flaws_cloudtrail:0000371:07c044b3-5020-405a-8010-1c926073e65db", "row_index": 371, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c044b3-5020-405a-8010-1c926073e65db", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "record_id": "flaws_cloudtrail:0000372:dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "row_index": 372, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd608b8-f1a1-4745-9ed0-68a21966cf4d", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "record_id": "flaws_cloudtrail:0000373:3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "row_index": 373, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8e748e-1a6e-4880-bb3e-1add1f8b5ee1", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0058ae46-76bb-486c-873a-172fd64d67a7", "record_id": "flaws_cloudtrail:0000374:0058ae46-76bb-486c-873a-172fd64d67a7", "row_index": 374, "timestamp": "2019-06-21T00:21:45Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0058ae46-76bb-486c-873a-172fd64d67a7", "eventTime": "2019-06-21T00:21:45Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The us-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "us-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1728cfb8-ad0a-4957-8a5e-604143448da5", "record_id": "flaws_cloudtrail:0000375:1728cfb8-ad0a-4957-8a5e-604143448da5", "row_index": 375, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1728cfb8-ad0a-4957-8a5e-604143448da5", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89465f0-8ad9-413e-ac72-7fc01ce8672f", "record_id": "flaws_cloudtrail:0000376:b89465f0-8ad9-413e-ac72-7fc01ce8672f", "row_index": 376, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89465f0-8ad9-413e-ac72-7fc01ce8672f", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "record_id": "flaws_cloudtrail:0000377:4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "row_index": 377, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "record_id": "flaws_cloudtrail:0000378:6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "row_index": 378, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fe2f77-fe71-4675-9987-fe7a433093d", "record_id": "flaws_cloudtrail:0000379:71fe2f77-fe71-4675-9987-fe7a433093d", "row_index": 379, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fe2f77-fe71-4675-9987-fe7a433093d", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1728cfb8-ad0a-4957-8a5e-604143448da5", "record_id": "flaws_cloudtrail:0000380:1728cfb8-ad0a-4957-8a5e-604143448da5", "row_index": 380, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1728cfb8-ad0a-4957-8a5e-604143448da5", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89465f0-8ad9-413e-ac72-7fc01ce8672f", "record_id": "flaws_cloudtrail:0000381:b89465f0-8ad9-413e-ac72-7fc01ce8672f", "row_index": 381, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89465f0-8ad9-413e-ac72-7fc01ce8672f", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "record_id": "flaws_cloudtrail:0000382:4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "row_index": 382, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b04099-fa69-4a8f-a65e-9cc00bf7bb05", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-south-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-south-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "record_id": "flaws_cloudtrail:0000383:6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "row_index": 383, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d792b70-6dc9-42e6-b5e5-22c2d7fe3509", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "InvalidLocationConstraint", "errorMessage": "The specified location-constraint is not valid", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fe2f77-fe71-4675-9987-fe7a433093d", "record_id": "flaws_cloudtrail:0000384:71fe2f77-fe71-4675-9987-fe7a433093d", "row_index": 384, "timestamp": "2019-06-21T00:21:46Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fe2f77-fe71-4675-9987-fe7a433093d", "eventTime": "2019-06-21T00:21:46Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-northeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-northeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d611585b-fa48-4bd4-8d03-d1ce0a376e29", "record_id": "flaws_cloudtrail:0000385:d611585b-fa48-4bd4-8d03-d1ce0a376e29", "row_index": 385, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d611585b-fa48-4bd4-8d03-d1ce0a376e29", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68c3bb6f-50d8-4734-847e-da40f8843767", "record_id": "flaws_cloudtrail:0000386:68c3bb6f-50d8-4734-847e-da40f8843767", "row_index": 386, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68c3bb6f-50d8-4734-847e-da40f8843767", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab732a3f-7abe-461e-a61c-28c54a19bc17", "record_id": "flaws_cloudtrail:0000387:ab732a3f-7abe-461e-a61c-28c54a19bc17", "row_index": 387, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab732a3f-7abe-461e-a61c-28c54a19bc17", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17b075534-0bef-4c43-b9b1-0b5ce3a113894", "record_id": "flaws_cloudtrail:0000388:17b075534-0bef-4c43-b9b1-0b5ce3a113894", "row_index": 388, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17b075534-0bef-4c43-b9b1-0b5ce3a113894", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d38b81-dca8-4e13-8f75-d21f9f99148", "record_id": "flaws_cloudtrail:0000389:74d38b81-dca8-4e13-8f75-d21f9f99148", "row_index": 389, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d38b81-dca8-4e13-8f75-d21f9f99148", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786dd3f1-9503-4963-99ca-8311df4ec1d0", "record_id": "flaws_cloudtrail:0000390:786dd3f1-9503-4963-99ca-8311df4ec1d0", "row_index": 390, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786dd3f1-9503-4963-99ca-8311df4ec1d0", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d611585b-fa48-4bd4-8d03-d1ce0a376e29", "record_id": "flaws_cloudtrail:0000391:d611585b-fa48-4bd4-8d03-d1ce0a376e29", "row_index": 391, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d611585b-fa48-4bd4-8d03-d1ce0a376e29", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ca-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ca-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68c3bb6f-50d8-4734-847e-da40f8843767", "record_id": "flaws_cloudtrail:0000392:68c3bb6f-50d8-4734-847e-da40f8843767", "row_index": 392, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68c3bb6f-50d8-4734-847e-da40f8843767", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-southeast-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-southeast-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab732a3f-7abe-461e-a61c-28c54a19bc17", "record_id": "flaws_cloudtrail:0000393:ab732a3f-7abe-461e-a61c-28c54a19bc17", "row_index": 393, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab732a3f-7abe-461e-a61c-28c54a19bc17", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17b075534-0bef-4c43-b9b1-0b5ce3a113894", "record_id": "flaws_cloudtrail:0000394:17b075534-0bef-4c43-b9b1-0b5ce3a113894", "row_index": 394, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17b075534-0bef-4c43-b9b1-0b5ce3a113894", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The ap-sourtheast-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "ap-sourtheast-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d38b81-dca8-4e13-8f75-d21f9f99148", "record_id": "flaws_cloudtrail:0000395:74d38b81-dca8-4e13-8f75-d21f9f99148", "row_index": 395, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d38b81-dca8-4e13-8f75-d21f9f99148", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-central-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-central-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786dd3f1-9503-4963-99ca-8311df4ec1d0", "record_id": "flaws_cloudtrail:0000396:786dd3f1-9503-4963-99ca-8311df4ec1d0", "row_index": 396, "timestamp": "2019-06-21T00:21:47Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786dd3f1-9503-4963-99ca-8311df4ec1d0", "eventTime": "2019-06-21T00:21:47Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The cn-northwest-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "cn-northwest-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1b7909d-123b-4dc7-94cc-e6a165e47a43", "record_id": "flaws_cloudtrail:0000397:d1b7909d-123b-4dc7-94cc-e6a165e47a43", "row_index": 397, "timestamp": "2019-06-21T00:21:48Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1b7909d-123b-4dc7-94cc-e6a165e47a43", "eventTime": "2019-06-21T00:21:48Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70cbf088-db59-466f-93d8-e88c59dc27c6", "record_id": "flaws_cloudtrail:0000398:70cbf088-db59-466f-93d8-e88c59dc27c6", "row_index": 398, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70cbf088-db59-466f-93d8-e88c59dc27c6", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "record_id": "flaws_cloudtrail:0000399:10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "row_index": 399, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38c4eb2c-cafe-467b-864a-657deeb206a3", "record_id": "flaws_cloudtrail:0000400:38c4eb2c-cafe-467b-864a-657deeb206a3", "row_index": 400, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38c4eb2c-cafe-467b-864a-657deeb206a3", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b077a3-ce74-49b8-8fb2-fac6e04db115", "record_id": "flaws_cloudtrail:0000401:18b077a3-ce74-49b8-8fb2-fac6e04db115", "row_index": 401, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b077a3-ce74-49b8-8fb2-fac6e04db115", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cc943698-e5a4-486b-9210-7a00b300183ae", "record_id": "flaws_cloudtrail:0000402:7cc943698-e5a4-486b-9210-7a00b300183ae", "row_index": 402, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cc943698-e5a4-486b-9210-7a00b300183ae", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1b7909d-123b-4dc7-94cc-e6a165e47a43", "record_id": "flaws_cloudtrail:0000403:d1b7909d-123b-4dc7-94cc-e6a165e47a43", "row_index": 403, "timestamp": "2019-06-21T00:21:48Z", "event_type": "DeleteBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1b7909d-123b-4dc7-94cc-e6a165e47a43", "eventTime": "2019-06-21T00:21:48Z", "eventName": "DeleteBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["pwnd.s3.us-west-1.amazonaws.com"], "bucketName": "pwnd"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70cbf088-db59-466f-93d8-e88c59dc27c6", "record_id": "flaws_cloudtrail:0000404:70cbf088-db59-466f-93d8-e88c59dc27c6", "row_index": 404, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70cbf088-db59-466f-93d8-e88c59dc27c6", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-3 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-3", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "record_id": "flaws_cloudtrail:0000405:10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "row_index": 405, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a75c4b-0506-4dc9-9004-8a36e70a6eb6", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-2 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-2", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38c4eb2c-cafe-467b-864a-657deeb206a3", "record_id": "flaws_cloudtrail:0000406:38c4eb2c-cafe-467b-864a-657deeb206a3", "row_index": 406, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38c4eb2c-cafe-467b-864a-657deeb206a3", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-north-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-north-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b077a3-ce74-49b8-8fb2-fac6e04db115", "record_id": "flaws_cloudtrail:0000407:18b077a3-ce74-49b8-8fb2-fac6e04db115", "row_index": 407, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1145, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b077a3-ce74-49b8-8fb2-fac6e04db115", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The eu-west-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "eu-west-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cc943698-e5a4-486b-9210-7a00b300183ae", "record_id": "flaws_cloudtrail:0000408:7cc943698-e5a4-486b-9210-7a00b300183ae", "row_index": 408, "timestamp": "2019-06-21T00:21:48Z", "event_type": "CreateBucket", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1146, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cc943698-e5a4-486b-9210-7a00b300183ae", "eventTime": "2019-06-21T00:21:48Z", "eventName": "CreateBucket", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-1", "errorCode": "IllegalLocationConstraintException", "errorMessage": "The sa-east-1 location constraint is incompatible for the region specific endpoint this request was sent to.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateBucketConfiguration": {"LocationConstraint": "sa-east-1", "xmlns": "http://s3.amazonaws.com/doc/2006-03-01/"}, "bucketName": "pwnd", "host": ["pwnd.s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "370ab673-7153-4cda-aa71-916077c14eb3", "record_id": "flaws_cloudtrail:0000409:370ab673-7153-4cda-aa71-916077c14eb3", "row_index": 409, "timestamp": "2019-06-21T00:22:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "370ab673-7153-4cda-aa71-916077c14eb3", "eventTime": "2019-06-21T00:22:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a4b1c08-a96b-4133-a040-e0b43b23803", "record_id": "flaws_cloudtrail:0000410:1a4b1c08-a96b-4133-a040-e0b43b23803", "row_index": 410, "timestamp": "2019-06-21T00:22:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a4b1c08-a96b-4133-a040-e0b43b23803", "eventTime": "2019-06-21T00:22:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "370ab673-7153-4cda-aa71-916077c14eb3", "record_id": "flaws_cloudtrail:0000411:370ab673-7153-4cda-aa71-916077c14eb3", "row_index": 411, "timestamp": "2019-06-21T00:22:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "370ab673-7153-4cda-aa71-916077c14eb3", "eventTime": "2019-06-21T00:22:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a4b1c08-a96b-4133-a040-e0b43b23803", "record_id": "flaws_cloudtrail:0000412:1a4b1c08-a96b-4133-a040-e0b43b23803", "row_index": 412, "timestamp": "2019-06-21T00:22:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a4b1c08-a96b-4133-a040-e0b43b23803", "eventTime": "2019-06-21T00:22:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "record_id": "flaws_cloudtrail:0000413:0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "row_index": 413, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "record_id": "flaws_cloudtrail:0000414:db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "row_index": 414, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6750b1b8-f2bc-4edb-bcfe-faa963087f69", "record_id": "flaws_cloudtrail:0000415:6750b1b8-f2bc-4edb-bcfe-faa963087f69", "row_index": 415, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6750b1b8-f2bc-4edb-bcfe-faa963087f69", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f108a72-e898-4354-80d2-c0dcdcc5016a", "record_id": "flaws_cloudtrail:0000416:1f108a72-e898-4354-80d2-c0dcdcc5016a", "row_index": 416, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f108a72-e898-4354-80d2-c0dcdcc5016a", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "record_id": "flaws_cloudtrail:0000417:549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "row_index": 417, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276572f9-9b9e-45ac-91c0-24c4f499ab8b", "record_id": "flaws_cloudtrail:0000418:276572f9-9b9e-45ac-91c0-24c4f499ab8b", "row_index": 418, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276572f9-9b9e-45ac-91c0-24c4f499ab8b", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46b4259-1b15-4a02-b6e0-e9ec75a318495", "record_id": "flaws_cloudtrail:0000419:f46b4259-1b15-4a02-b6e0-e9ec75a318495", "row_index": 419, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46b4259-1b15-4a02-b6e0-e9ec75a318495", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "record_id": "flaws_cloudtrail:0000420:dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "row_index": 420, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92cdb873-e3eb-448c-a393-db32b4b61813", "record_id": "flaws_cloudtrail:0000421:92cdb873-e3eb-448c-a393-db32b4b61813", "row_index": 421, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92cdb873-e3eb-448c-a393-db32b4b61813", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33ec822-334a-4d0d-a941-768152e", "record_id": "flaws_cloudtrail:0000422:d33ec822-334a-4d0d-a941-768152e", "row_index": 422, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33ec822-334a-4d0d-a941-768152e", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "record_id": "flaws_cloudtrail:0000423:f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "row_index": 423, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650c0ec7-e2d2-43e8-ab8d-529c90d74973", "record_id": "flaws_cloudtrail:0000424:650c0ec7-e2d2-43e8-ab8d-529c90d74973", "row_index": 424, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650c0ec7-e2d2-43e8-ab8d-529c90d74973", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369726b53-8080-4a5b-9ba6-90f187ce9af0", "record_id": "flaws_cloudtrail:0000425:369726b53-8080-4a5b-9ba6-90f187ce9af0", "row_index": 425, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369726b53-8080-4a5b-9ba6-90f187ce9af0", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9f29d9-b270-4c01-8842-13939fd55c6", "record_id": "flaws_cloudtrail:0000426:8a9f29d9-b270-4c01-8842-13939fd55c6", "row_index": 426, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9f29d9-b270-4c01-8842-13939fd55c6", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49af3a24-8be0-464b-8f7c-5b02a504df5d", "record_id": "flaws_cloudtrail:0000427:49af3a24-8be0-464b-8f7c-5b02a504df5d", "row_index": 427, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49af3a24-8be0-464b-8f7c-5b02a504df5d", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37c5758a-1a68-4372-a2c9-846efe382708", "record_id": "flaws_cloudtrail:0000428:37c5758a-1a68-4372-a2c9-846efe382708", "row_index": 428, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37c5758a-1a68-4372-a2c9-846efe382708", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "record_id": "flaws_cloudtrail:0000429:0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "row_index": 429, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0caafbd7-94c1-496c-9dab-6332fa0b5c4f", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "record_id": "flaws_cloudtrail:0000430:db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "row_index": 430, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db3b12f7-5d3a-4935-8cc8-b1f62ff4ae91", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6750b1b8-f2bc-4edb-bcfe-faa963087f69", "record_id": "flaws_cloudtrail:0000431:6750b1b8-f2bc-4edb-bcfe-faa963087f69", "row_index": 431, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6750b1b8-f2bc-4edb-bcfe-faa963087f69", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f108a72-e898-4354-80d2-c0dcdcc5016a", "record_id": "flaws_cloudtrail:0000432:1f108a72-e898-4354-80d2-c0dcdcc5016a", "row_index": 432, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f108a72-e898-4354-80d2-c0dcdcc5016a", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "record_id": "flaws_cloudtrail:0000433:549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "row_index": 433, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549433b36-1ad1-4f42-9f1a-c130e9fa15cd", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276572f9-9b9e-45ac-91c0-24c4f499ab8b", "record_id": "flaws_cloudtrail:0000434:276572f9-9b9e-45ac-91c0-24c4f499ab8b", "row_index": 434, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276572f9-9b9e-45ac-91c0-24c4f499ab8b", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f46b4259-1b15-4a02-b6e0-e9ec75a318495", "record_id": "flaws_cloudtrail:0000435:f46b4259-1b15-4a02-b6e0-e9ec75a318495", "row_index": 435, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f46b4259-1b15-4a02-b6e0-e9ec75a318495", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "record_id": "flaws_cloudtrail:0000436:dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "row_index": 436, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc4aee3e-c827-4951-8a54-1b3ed1076d2e", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92cdb873-e3eb-448c-a393-db32b4b61813", "record_id": "flaws_cloudtrail:0000437:92cdb873-e3eb-448c-a393-db32b4b61813", "row_index": 437, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92cdb873-e3eb-448c-a393-db32b4b61813", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33ec822-334a-4d0d-a941-768152e", "record_id": "flaws_cloudtrail:0000438:d33ec822-334a-4d0d-a941-768152e", "row_index": 438, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33ec822-334a-4d0d-a941-768152e", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "record_id": "flaws_cloudtrail:0000439:f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "row_index": 439, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d8ad77-e53b-478b-8856-00a3c4a7f4dc", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "650c0ec7-e2d2-43e8-ab8d-529c90d74973", "record_id": "flaws_cloudtrail:0000440:650c0ec7-e2d2-43e8-ab8d-529c90d74973", "row_index": 440, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "650c0ec7-e2d2-43e8-ab8d-529c90d74973", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369726b53-8080-4a5b-9ba6-90f187ce9af0", "record_id": "flaws_cloudtrail:0000441:369726b53-8080-4a5b-9ba6-90f187ce9af0", "row_index": 441, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369726b53-8080-4a5b-9ba6-90f187ce9af0", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9f29d9-b270-4c01-8842-13939fd55c6", "record_id": "flaws_cloudtrail:0000442:8a9f29d9-b270-4c01-8842-13939fd55c6", "row_index": 442, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9f29d9-b270-4c01-8842-13939fd55c6", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49af3a24-8be0-464b-8f7c-5b02a504df5d", "record_id": "flaws_cloudtrail:0000443:49af3a24-8be0-464b-8f7c-5b02a504df5d", "row_index": 443, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49af3a24-8be0-464b-8f7c-5b02a504df5d", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37c5758a-1a68-4372-a2c9-846efe382708", "record_id": "flaws_cloudtrail:0000444:37c5758a-1a68-4372-a2c9-846efe382708", "row_index": 444, "timestamp": "2019-06-21T00:23:07Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37c5758a-1a68-4372-a2c9-846efe382708", "eventTime": "2019-06-21T00:23:07Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7028cd-3467-4786-94e2-199185c76bbab", "record_id": "flaws_cloudtrail:0000445:8a7028cd-3467-4786-94e2-199185c76bbab", "row_index": 445, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7028cd-3467-4786-94e2-199185c76bbab", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049db912-0990-40b7-9bc5-b175c2c31e32", "record_id": "flaws_cloudtrail:0000446:049db912-0990-40b7-9bc5-b175c2c31e32", "row_index": 446, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049db912-0990-40b7-9bc5-b175c2c31e32", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "record_id": "flaws_cloudtrail:0000447:69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "row_index": 447, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "record_id": "flaws_cloudtrail:0000448:7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "row_index": 448, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "record_id": "flaws_cloudtrail:0000449:e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "row_index": 449, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5beb2d3-78aa-42ff-87af-e24411adee25", "record_id": "flaws_cloudtrail:0000450:b5beb2d3-78aa-42ff-87af-e24411adee25", "row_index": 450, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5beb2d3-78aa-42ff-87af-e24411adee25", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60939-bb6c-415c-821f-0d4c25dcaefb", "record_id": "flaws_cloudtrail:0000451:60939-bb6c-415c-821f-0d4c25dcaefb", "row_index": 451, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60939-bb6c-415c-821f-0d4c25dcaefb", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e6fce1-1b4a-4980-8530-176a8e9ce214", "record_id": "flaws_cloudtrail:0000452:65e6fce1-1b4a-4980-8530-176a8e9ce214", "row_index": 452, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e6fce1-1b4a-4980-8530-176a8e9ce214", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c84b472-2751-4e52-ba13-30ae973c1977", "record_id": "flaws_cloudtrail:0000453:3c84b472-2751-4e52-ba13-30ae973c1977", "row_index": 453, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c84b472-2751-4e52-ba13-30ae973c1977", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4cd9f0-d415-47c1-8d00-925610e272b", "record_id": "flaws_cloudtrail:0000454:3e4cd9f0-d415-47c1-8d00-925610e272b", "row_index": 454, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4cd9f0-d415-47c1-8d00-925610e272b", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "record_id": "flaws_cloudtrail:0000455:1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "row_index": 455, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e5b344c-710e-4f88-b3ab-29f023030136", "record_id": "flaws_cloudtrail:0000456:5e5b344c-710e-4f88-b3ab-29f023030136", "row_index": 456, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e5b344c-710e-4f88-b3ab-29f023030136", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6ef10d-dd42-4415-8e51-a851ed9cb585", "record_id": "flaws_cloudtrail:0000457:ae6ef10d-dd42-4415-8e51-a851ed9cb585", "row_index": 457, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6ef10d-dd42-4415-8e51-a851ed9cb585", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "record_id": "flaws_cloudtrail:0000458:7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "row_index": 458, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c546ea-6e54-4090-8a3f-b80688d7a451", "record_id": "flaws_cloudtrail:0000459:54c546ea-6e54-4090-8a3f-b80688d7a451", "row_index": 459, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c546ea-6e54-4090-8a3f-b80688d7a451", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba30d1b-2535-4786-a792-b6556e60046", "record_id": "flaws_cloudtrail:0000460:8ba30d1b-2535-4786-a792-b6556e60046", "row_index": 460, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba30d1b-2535-4786-a792-b6556e60046", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7028cd-3467-4786-94e2-199185c76bbab", "record_id": "flaws_cloudtrail:0000461:8a7028cd-3467-4786-94e2-199185c76bbab", "row_index": 461, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7028cd-3467-4786-94e2-199185c76bbab", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049db912-0990-40b7-9bc5-b175c2c31e32", "record_id": "flaws_cloudtrail:0000462:049db912-0990-40b7-9bc5-b175c2c31e32", "row_index": 462, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049db912-0990-40b7-9bc5-b175c2c31e32", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "record_id": "flaws_cloudtrail:0000463:69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "row_index": 463, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ebe2d9-9768-40a2-b403-52fcaf1df3b5", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "record_id": "flaws_cloudtrail:0000464:7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "row_index": 464, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac8ebd6-5e60-41f9-85f9-3598a85c3fb2", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "record_id": "flaws_cloudtrail:0000465:e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "row_index": 465, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3faaa5c-9a79-43c9-bb10-8622e12cfc6e", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5beb2d3-78aa-42ff-87af-e24411adee25", "record_id": "flaws_cloudtrail:0000466:b5beb2d3-78aa-42ff-87af-e24411adee25", "row_index": 466, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5beb2d3-78aa-42ff-87af-e24411adee25", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60939-bb6c-415c-821f-0d4c25dcaefb", "record_id": "flaws_cloudtrail:0000467:60939-bb6c-415c-821f-0d4c25dcaefb", "row_index": 467, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60939-bb6c-415c-821f-0d4c25dcaefb", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e6fce1-1b4a-4980-8530-176a8e9ce214", "record_id": "flaws_cloudtrail:0000468:65e6fce1-1b4a-4980-8530-176a8e9ce214", "row_index": 468, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e6fce1-1b4a-4980-8530-176a8e9ce214", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c84b472-2751-4e52-ba13-30ae973c1977", "record_id": "flaws_cloudtrail:0000469:3c84b472-2751-4e52-ba13-30ae973c1977", "row_index": 469, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c84b472-2751-4e52-ba13-30ae973c1977", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4cd9f0-d415-47c1-8d00-925610e272b", "record_id": "flaws_cloudtrail:0000470:3e4cd9f0-d415-47c1-8d00-925610e272b", "row_index": 470, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4cd9f0-d415-47c1-8d00-925610e272b", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "record_id": "flaws_cloudtrail:0000471:1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "row_index": 471, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bcad638-b6f2-4431-8f1d-8dc60b40c00c", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e5b344c-710e-4f88-b3ab-29f023030136", "record_id": "flaws_cloudtrail:0000472:5e5b344c-710e-4f88-b3ab-29f023030136", "row_index": 472, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e5b344c-710e-4f88-b3ab-29f023030136", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6ef10d-dd42-4415-8e51-a851ed9cb585", "record_id": "flaws_cloudtrail:0000473:ae6ef10d-dd42-4415-8e51-a851ed9cb585", "row_index": 473, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6ef10d-dd42-4415-8e51-a851ed9cb585", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "record_id": "flaws_cloudtrail:0000474:7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "row_index": 474, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c893bad-8fb8-40c6-bc61-f2d57ee39f7c", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c546ea-6e54-4090-8a3f-b80688d7a451", "record_id": "flaws_cloudtrail:0000475:54c546ea-6e54-4090-8a3f-b80688d7a451", "row_index": 475, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c546ea-6e54-4090-8a3f-b80688d7a451", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba30d1b-2535-4786-a792-b6556e60046", "record_id": "flaws_cloudtrail:0000476:8ba30d1b-2535-4786-a792-b6556e60046", "row_index": 476, "timestamp": "2019-06-21T00:23:08Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba30d1b-2535-4786-a792-b6556e60046", "eventTime": "2019-06-21T00:23:08Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2442cd0c-82ec-4e0d-9ba0-11031bf0", "record_id": "flaws_cloudtrail:0000477:2442cd0c-82ec-4e0d-9ba0-11031bf0", "row_index": 477, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2442cd0c-82ec-4e0d-9ba0-11031bf0", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d78642-6711-4eb6-95d0-e98e3f450cab", "record_id": "flaws_cloudtrail:0000478:d78642-6711-4eb6-95d0-e98e3f450cab", "row_index": 478, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d78642-6711-4eb6-95d0-e98e3f450cab", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5de4c85-f770-44d0-8a55-67eed693418", "record_id": "flaws_cloudtrail:0000479:d5de4c85-f770-44d0-8a55-67eed693418", "row_index": 479, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5de4c85-f770-44d0-8a55-67eed693418", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33fcfb6-d43d-4aef-a980-1e676f8801e7", "record_id": "flaws_cloudtrail:0000480:e33fcfb6-d43d-4aef-a980-1e676f8801e7", "row_index": 480, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33fcfb6-d43d-4aef-a980-1e676f8801e7", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "record_id": "flaws_cloudtrail:0000481:ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "row_index": 481, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe03a43-b675-4920-aa6f-9362b3c95c9b", "record_id": "flaws_cloudtrail:0000482:bbe03a43-b675-4920-aa6f-9362b3c95c9b", "row_index": 482, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe03a43-b675-4920-aa6f-9362b3c95c9b", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5a71b55-a6d4-4f83-ae59-31510ee12", "record_id": "flaws_cloudtrail:0000483:a5a71b55-a6d4-4f83-ae59-31510ee12", "row_index": 483, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5a71b55-a6d4-4f83-ae59-31510ee12", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "record_id": "flaws_cloudtrail:0000484:cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "row_index": 484, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0d288ba-3c11-418a-835e-702e925a01c5", "record_id": "flaws_cloudtrail:0000485:d0d288ba-3c11-418a-835e-702e925a01c5", "row_index": 485, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0d288ba-3c11-418a-835e-702e925a01c5", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def81121-1875-41de-b668-ce0392da1ea4", "record_id": "flaws_cloudtrail:0000486:def81121-1875-41de-b668-ce0392da1ea4", "row_index": 486, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def81121-1875-41de-b668-ce0392da1ea4", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5aa0f50-d706-402c-aa81-7fc2597c2797", "record_id": "flaws_cloudtrail:0000487:e5aa0f50-d706-402c-aa81-7fc2597c2797", "row_index": 487, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5aa0f50-d706-402c-aa81-7fc2597c2797", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "record_id": "flaws_cloudtrail:0000488:2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "row_index": 488, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a1051f-dd41-4298-bf3e-68eebde056be", "record_id": "flaws_cloudtrail:0000489:f1a1051f-dd41-4298-bf3e-68eebde056be", "row_index": 489, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a1051f-dd41-4298-bf3e-68eebde056be", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbf38919-86fa-446b-95e1-8288c3b21e31", "record_id": "flaws_cloudtrail:0000490:cbf38919-86fa-446b-95e1-8288c3b21e31", "row_index": 490, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbf38919-86fa-446b-95e1-8288c3b21e31", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2781f6a8-7a80-47b8-bb9d-691d1d091b11", "record_id": "flaws_cloudtrail:0000491:2781f6a8-7a80-47b8-bb9d-691d1d091b11", "row_index": 491, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2781f6a8-7a80-47b8-bb9d-691d1d091b11", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e34bed-e6d5-4be9-bc89-474ebe398d5b", "record_id": "flaws_cloudtrail:0000492:46e34bed-e6d5-4be9-bc89-474ebe398d5b", "row_index": 492, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e34bed-e6d5-4be9-bc89-474ebe398d5b", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2442cd0c-82ec-4e0d-9ba0-11031bf0", "record_id": "flaws_cloudtrail:0000493:2442cd0c-82ec-4e0d-9ba0-11031bf0", "row_index": 493, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2442cd0c-82ec-4e0d-9ba0-11031bf0", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d78642-6711-4eb6-95d0-e98e3f450cab", "record_id": "flaws_cloudtrail:0000494:d78642-6711-4eb6-95d0-e98e3f450cab", "row_index": 494, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d78642-6711-4eb6-95d0-e98e3f450cab", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5de4c85-f770-44d0-8a55-67eed693418", "record_id": "flaws_cloudtrail:0000495:d5de4c85-f770-44d0-8a55-67eed693418", "row_index": 495, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5de4c85-f770-44d0-8a55-67eed693418", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33fcfb6-d43d-4aef-a980-1e676f8801e7", "record_id": "flaws_cloudtrail:0000496:e33fcfb6-d43d-4aef-a980-1e676f8801e7", "row_index": 496, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33fcfb6-d43d-4aef-a980-1e676f8801e7", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "record_id": "flaws_cloudtrail:0000497:ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "row_index": 497, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ded4cec7-ec73-4eaa-bcf1-133cdc823eee", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe03a43-b675-4920-aa6f-9362b3c95c9b", "record_id": "flaws_cloudtrail:0000498:bbe03a43-b675-4920-aa6f-9362b3c95c9b", "row_index": 498, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe03a43-b675-4920-aa6f-9362b3c95c9b", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5a71b55-a6d4-4f83-ae59-31510ee12", "record_id": "flaws_cloudtrail:0000499:a5a71b55-a6d4-4f83-ae59-31510ee12", "row_index": 499, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5a71b55-a6d4-4f83-ae59-31510ee12", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "record_id": "flaws_cloudtrail:0000500:cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "row_index": 500, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd0bf4a8-7738-4aeb-b6e1-3a91a508871", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0d288ba-3c11-418a-835e-702e925a01c5", "record_id": "flaws_cloudtrail:0000501:d0d288ba-3c11-418a-835e-702e925a01c5", "row_index": 501, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0d288ba-3c11-418a-835e-702e925a01c5", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "def81121-1875-41de-b668-ce0392da1ea4", "record_id": "flaws_cloudtrail:0000502:def81121-1875-41de-b668-ce0392da1ea4", "row_index": 502, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "def81121-1875-41de-b668-ce0392da1ea4", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5aa0f50-d706-402c-aa81-7fc2597c2797", "record_id": "flaws_cloudtrail:0000503:e5aa0f50-d706-402c-aa81-7fc2597c2797", "row_index": 503, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5aa0f50-d706-402c-aa81-7fc2597c2797", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "record_id": "flaws_cloudtrail:0000504:2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "row_index": 504, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5c5e58-47cd-4639-8fd7-c68f06d42f65", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a1051f-dd41-4298-bf3e-68eebde056be", "record_id": "flaws_cloudtrail:0000505:f1a1051f-dd41-4298-bf3e-68eebde056be", "row_index": 505, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a1051f-dd41-4298-bf3e-68eebde056be", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbf38919-86fa-446b-95e1-8288c3b21e31", "record_id": "flaws_cloudtrail:0000506:cbf38919-86fa-446b-95e1-8288c3b21e31", "row_index": 506, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 943, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbf38919-86fa-446b-95e1-8288c3b21e31", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2781f6a8-7a80-47b8-bb9d-691d1d091b11", "record_id": "flaws_cloudtrail:0000507:2781f6a8-7a80-47b8-bb9d-691d1d091b11", "row_index": 507, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2781f6a8-7a80-47b8-bb9d-691d1d091b11", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e34bed-e6d5-4be9-bc89-474ebe398d5b", "record_id": "flaws_cloudtrail:0000508:46e34bed-e6d5-4be9-bc89-474ebe398d5b", "row_index": 508, "timestamp": "2019-06-21T00:23:09Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e34bed-e6d5-4be9-bc89-474ebe398d5b", "eventTime": "2019-06-21T00:23:09Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "record_id": "flaws_cloudtrail:0000509:9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "row_index": 509, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4adc9adf-d989-43e5-beae-2debabb56940", "record_id": "flaws_cloudtrail:0000510:4adc9adf-d989-43e5-beae-2debabb56940", "row_index": 510, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4adc9adf-d989-43e5-beae-2debabb56940", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "record_id": "flaws_cloudtrail:0000511:aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "row_index": 511, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "record_id": "flaws_cloudtrail:0000512:b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "row_index": 512, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dec3a16-f236-40fa-8d3c-bec3358eb88d", "record_id": "flaws_cloudtrail:0000513:5dec3a16-f236-40fa-8d3c-bec3358eb88d", "row_index": 513, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dec3a16-f236-40fa-8d3c-bec3358eb88d", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67eab746-6eb9-4555-9b70-ccfda3ea812f", "record_id": "flaws_cloudtrail:0000514:67eab746-6eb9-4555-9b70-ccfda3ea812f", "row_index": 514, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67eab746-6eb9-4555-9b70-ccfda3ea812f", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e105e7-0b94-47ec-b851-05c45434c27f", "record_id": "flaws_cloudtrail:0000515:94e105e7-0b94-47ec-b851-05c45434c27f", "row_index": 515, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e105e7-0b94-47ec-b851-05c45434c27f", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9127b3e3-53fb-467c-a987-757cdad18622", "record_id": "flaws_cloudtrail:0000516:9127b3e3-53fb-467c-a987-757cdad18622", "row_index": 516, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9127b3e3-53fb-467c-a987-757cdad18622", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162e7ece-2a72-4fba-a82f-46c413bf8b4e", "record_id": "flaws_cloudtrail:0000517:162e7ece-2a72-4fba-a82f-46c413bf8b4e", "row_index": 517, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162e7ece-2a72-4fba-a82f-46c413bf8b4e", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "record_id": "flaws_cloudtrail:0000518:b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "row_index": 518, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc512b4-1a03-45c9-b00e-bdf48109af22", "record_id": "flaws_cloudtrail:0000519:3bc512b4-1a03-45c9-b00e-bdf48109af22", "row_index": 519, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc512b4-1a03-45c9-b00e-bdf48109af22", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "record_id": "flaws_cloudtrail:0000520:4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "row_index": 520, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "record_id": "flaws_cloudtrail:0000521:a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "row_index": 521, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89229b-ca2f-4848-9837-4f5db5bfefda", "record_id": "flaws_cloudtrail:0000522:89229b-ca2f-4848-9837-4f5db5bfefda", "row_index": 522, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89229b-ca2f-4848-9837-4f5db5bfefda", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "babcf041-d052-46a2-a4be-2ecb48ebc155", "record_id": "flaws_cloudtrail:0000523:babcf041-d052-46a2-a4be-2ecb48ebc155", "row_index": 523, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "babcf041-d052-46a2-a4be-2ecb48ebc155", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89c0271-2253-4cfa-a624-8482e3e969738", "record_id": "flaws_cloudtrail:0000524:d89c0271-2253-4cfa-a624-8482e3e969738", "row_index": 524, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89c0271-2253-4cfa-a624-8482e3e969738", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "record_id": "flaws_cloudtrail:0000525:9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "row_index": 525, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff4dd2e-720c-4c0c-9cf1-72db2a354c60", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4adc9adf-d989-43e5-beae-2debabb56940", "record_id": "flaws_cloudtrail:0000526:4adc9adf-d989-43e5-beae-2debabb56940", "row_index": 526, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4adc9adf-d989-43e5-beae-2debabb56940", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "record_id": "flaws_cloudtrail:0000527:aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "row_index": 527, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 939, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac6064b-7e0e-4a53-9836-5b5a549c9ac2", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "record_id": "flaws_cloudtrail:0000528:b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "row_index": 528, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 941, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90ec20e-cc78-497f-9d08-e2b03e8d82c9", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dec3a16-f236-40fa-8d3c-bec3358eb88d", "record_id": "flaws_cloudtrail:0000529:5dec3a16-f236-40fa-8d3c-bec3358eb88d", "row_index": 529, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dec3a16-f236-40fa-8d3c-bec3358eb88d", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67eab746-6eb9-4555-9b70-ccfda3ea812f", "record_id": "flaws_cloudtrail:0000530:67eab746-6eb9-4555-9b70-ccfda3ea812f", "row_index": 530, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 935, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67eab746-6eb9-4555-9b70-ccfda3ea812f", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e105e7-0b94-47ec-b851-05c45434c27f", "record_id": "flaws_cloudtrail:0000531:94e105e7-0b94-47ec-b851-05c45434c27f", "row_index": 531, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e105e7-0b94-47ec-b851-05c45434c27f", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9127b3e3-53fb-467c-a987-757cdad18622", "record_id": "flaws_cloudtrail:0000532:9127b3e3-53fb-467c-a987-757cdad18622", "row_index": 532, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9127b3e3-53fb-467c-a987-757cdad18622", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162e7ece-2a72-4fba-a82f-46c413bf8b4e", "record_id": "flaws_cloudtrail:0000533:162e7ece-2a72-4fba-a82f-46c413bf8b4e", "row_index": 533, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162e7ece-2a72-4fba-a82f-46c413bf8b4e", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "record_id": "flaws_cloudtrail:0000534:b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "row_index": 534, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7eb1f38-155a-4ea6-9e6c-e83eec2b28c2", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc512b4-1a03-45c9-b00e-bdf48109af22", "record_id": "flaws_cloudtrail:0000535:3bc512b4-1a03-45c9-b00e-bdf48109af22", "row_index": 535, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 940, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc512b4-1a03-45c9-b00e-bdf48109af22", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "record_id": "flaws_cloudtrail:0000536:4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "row_index": 536, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab24466-c75f-47f2-aeeb-ae5fba87d08e", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "record_id": "flaws_cloudtrail:0000537:a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "row_index": 537, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a749370-d50e-4aa5-a701-7fe2ca4d4ab0", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89229b-ca2f-4848-9837-4f5db5bfefda", "record_id": "flaws_cloudtrail:0000538:89229b-ca2f-4848-9837-4f5db5bfefda", "row_index": 538, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89229b-ca2f-4848-9837-4f5db5bfefda", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "babcf041-d052-46a2-a4be-2ecb48ebc155", "record_id": "flaws_cloudtrail:0000539:babcf041-d052-46a2-a4be-2ecb48ebc155", "row_index": 539, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "babcf041-d052-46a2-a4be-2ecb48ebc155", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89c0271-2253-4cfa-a624-8482e3e969738", "record_id": "flaws_cloudtrail:0000540:d89c0271-2253-4cfa-a624-8482e3e969738", "row_index": 540, "timestamp": "2019-06-21T00:23:12Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89c0271-2253-4cfa-a624-8482e3e969738", "eventTime": "2019-06-21T00:23:12Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708b3234-2776-4d62-95d2-d617919d", "record_id": "flaws_cloudtrail:0000541:708b3234-2776-4d62-95d2-d617919d", "row_index": 541, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708b3234-2776-4d62-95d2-d617919d", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44bcc808-4734-4a81-b7a3-075940b11ac", "record_id": "flaws_cloudtrail:0000542:44bcc808-4734-4a81-b7a3-075940b11ac", "row_index": 542, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44bcc808-4734-4a81-b7a3-075940b11ac", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2912f1-bb0a-48f7-bb73-b7eb04133e", "record_id": "flaws_cloudtrail:0000543:6b2912f1-bb0a-48f7-bb73-b7eb04133e", "row_index": 543, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2912f1-bb0a-48f7-bb73-b7eb04133e", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43236fb1-4e42-49b2-978c-38b7d2724a6b", "record_id": "flaws_cloudtrail:0000544:43236fb1-4e42-49b2-978c-38b7d2724a6b", "row_index": 544, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43236fb1-4e42-49b2-978c-38b7d2724a6b", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66aa3682-85a7-4dad-8aca-512f5df19411", "record_id": "flaws_cloudtrail:0000545:66aa3682-85a7-4dad-8aca-512f5df19411", "row_index": 545, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66aa3682-85a7-4dad-8aca-512f5df19411", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2a7709e-1298-4d15-b665-94a827a5d874", "record_id": "flaws_cloudtrail:0000546:d2a7709e-1298-4d15-b665-94a827a5d874", "row_index": 546, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2a7709e-1298-4d15-b665-94a827a5d874", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d62804a7-a184-4223-87ae-2835a1e0ebd0", "record_id": "flaws_cloudtrail:0000547:d62804a7-a184-4223-87ae-2835a1e0ebd0", "row_index": 547, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d62804a7-a184-4223-87ae-2835a1e0ebd0", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2214f2b7-292c-48f2-b45f-04c9e09a343c", "record_id": "flaws_cloudtrail:0000548:2214f2b7-292c-48f2-b45f-04c9e09a343c", "row_index": 548, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2214f2b7-292c-48f2-b45f-04c9e09a343c", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df00f1e7-4315-4ecd-b0f8-23253eded", "record_id": "flaws_cloudtrail:0000549:df00f1e7-4315-4ecd-b0f8-23253eded", "row_index": 549, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df00f1e7-4315-4ecd-b0f8-23253eded", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87edf10b-0f9a-4711-9c02-ec832a62a9f2", "record_id": "flaws_cloudtrail:0000550:87edf10b-0f9a-4711-9c02-ec832a62a9f2", "row_index": 550, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87edf10b-0f9a-4711-9c02-ec832a62a9f2", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "record_id": "flaws_cloudtrail:0000551:9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "row_index": 551, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266947d7-64a5-4e5a-a5d3-b2db913d37bc", "record_id": "flaws_cloudtrail:0000552:266947d7-64a5-4e5a-a5d3-b2db913d37bc", "row_index": 552, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266947d7-64a5-4e5a-a5d3-b2db913d37bc", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "record_id": "flaws_cloudtrail:0000553:d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "row_index": 553, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c77693-486b-41fa-b014-58234ef77005", "record_id": "flaws_cloudtrail:0000554:6c77693-486b-41fa-b014-58234ef77005", "row_index": 554, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c77693-486b-41fa-b014-58234ef77005", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "record_id": "flaws_cloudtrail:0000555:c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "row_index": 555, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b065de0-3472-4cf5-97b8-489792187190", "record_id": "flaws_cloudtrail:0000556:6b065de0-3472-4cf5-97b8-489792187190", "row_index": 556, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b065de0-3472-4cf5-97b8-489792187190", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708b3234-2776-4d62-95d2-d617919d", "record_id": "flaws_cloudtrail:0000557:708b3234-2776-4d62-95d2-d617919d", "row_index": 557, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708b3234-2776-4d62-95d2-d617919d", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44bcc808-4734-4a81-b7a3-075940b11ac", "record_id": "flaws_cloudtrail:0000558:44bcc808-4734-4a81-b7a3-075940b11ac", "row_index": 558, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44bcc808-4734-4a81-b7a3-075940b11ac", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2912f1-bb0a-48f7-bb73-b7eb04133e", "record_id": "flaws_cloudtrail:0000559:6b2912f1-bb0a-48f7-bb73-b7eb04133e", "row_index": 559, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2912f1-bb0a-48f7-bb73-b7eb04133e", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43236fb1-4e42-49b2-978c-38b7d2724a6b", "record_id": "flaws_cloudtrail:0000560:43236fb1-4e42-49b2-978c-38b7d2724a6b", "row_index": 560, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43236fb1-4e42-49b2-978c-38b7d2724a6b", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66aa3682-85a7-4dad-8aca-512f5df19411", "record_id": "flaws_cloudtrail:0000561:66aa3682-85a7-4dad-8aca-512f5df19411", "row_index": 561, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66aa3682-85a7-4dad-8aca-512f5df19411", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2a7709e-1298-4d15-b665-94a827a5d874", "record_id": "flaws_cloudtrail:0000562:d2a7709e-1298-4d15-b665-94a827a5d874", "row_index": 562, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2a7709e-1298-4d15-b665-94a827a5d874", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d62804a7-a184-4223-87ae-2835a1e0ebd0", "record_id": "flaws_cloudtrail:0000563:d62804a7-a184-4223-87ae-2835a1e0ebd0", "row_index": 563, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d62804a7-a184-4223-87ae-2835a1e0ebd0", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2214f2b7-292c-48f2-b45f-04c9e09a343c", "record_id": "flaws_cloudtrail:0000564:2214f2b7-292c-48f2-b45f-04c9e09a343c", "row_index": 564, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2214f2b7-292c-48f2-b45f-04c9e09a343c", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df00f1e7-4315-4ecd-b0f8-23253eded", "record_id": "flaws_cloudtrail:0000565:df00f1e7-4315-4ecd-b0f8-23253eded", "row_index": 565, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df00f1e7-4315-4ecd-b0f8-23253eded", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87edf10b-0f9a-4711-9c02-ec832a62a9f2", "record_id": "flaws_cloudtrail:0000566:87edf10b-0f9a-4711-9c02-ec832a62a9f2", "row_index": 566, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87edf10b-0f9a-4711-9c02-ec832a62a9f2", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "record_id": "flaws_cloudtrail:0000567:9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "row_index": 567, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c4ab1bc-55ed-45ad-8c62-ed0745f9884a", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266947d7-64a5-4e5a-a5d3-b2db913d37bc", "record_id": "flaws_cloudtrail:0000568:266947d7-64a5-4e5a-a5d3-b2db913d37bc", "row_index": 568, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266947d7-64a5-4e5a-a5d3-b2db913d37bc", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "record_id": "flaws_cloudtrail:0000569:d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "row_index": 569, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d70a7cca-405b-4bd1-9bfa-cb6b21bf359d", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c77693-486b-41fa-b014-58234ef77005", "record_id": "flaws_cloudtrail:0000570:6c77693-486b-41fa-b014-58234ef77005", "row_index": 570, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c77693-486b-41fa-b014-58234ef77005", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "record_id": "flaws_cloudtrail:0000571:c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "row_index": 571, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c70b2f-f72c-40b2-84ac-e80d5ff57dc4", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b065de0-3472-4cf5-97b8-489792187190", "record_id": "flaws_cloudtrail:0000572:6b065de0-3472-4cf5-97b8-489792187190", "row_index": 572, "timestamp": "2019-06-21T00:23:14Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b065de0-3472-4cf5-97b8-489792187190", "eventTime": "2019-06-21T00:23:14Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "record_id": "flaws_cloudtrail:0000573:569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "row_index": 573, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8634d5-e621-4486-90b5-6169dc6283f5", "record_id": "flaws_cloudtrail:0000574:4a8634d5-e621-4486-90b5-6169dc6283f5", "row_index": 574, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8634d5-e621-4486-90b5-6169dc6283f5", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "record_id": "flaws_cloudtrail:0000575:c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "row_index": 575, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c33bb63-9170-48db-94ea-9c032c509660", "record_id": "flaws_cloudtrail:0000576:1c33bb63-9170-48db-94ea-9c032c509660", "row_index": 576, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c33bb63-9170-48db-94ea-9c032c509660", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a305032-74f9-4408-9903-b122b40210b8", "record_id": "flaws_cloudtrail:0000577:0a305032-74f9-4408-9903-b122b40210b8", "row_index": 577, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a305032-74f9-4408-9903-b122b40210b8", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165b8711-3e2e-48de-b057-0d26af1f883e", "record_id": "flaws_cloudtrail:0000578:165b8711-3e2e-48de-b057-0d26af1f883e", "row_index": 578, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165b8711-3e2e-48de-b057-0d26af1f883e", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013503-b022-4fad-b790-1ac145c288ba", "record_id": "flaws_cloudtrail:0000579:013503-b022-4fad-b790-1ac145c288ba", "row_index": 579, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013503-b022-4fad-b790-1ac145c288ba", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25f43249-621a-4fac-8e2e-494e756c7af2", "record_id": "flaws_cloudtrail:0000580:25f43249-621a-4fac-8e2e-494e756c7af2", "row_index": 580, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25f43249-621a-4fac-8e2e-494e756c7af2", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ef6a52-d92c-4a82-bb02-3c735c444a6d", "record_id": "flaws_cloudtrail:0000581:49ef6a52-d92c-4a82-bb02-3c735c444a6d", "row_index": 581, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ef6a52-d92c-4a82-bb02-3c735c444a6d", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d880d3-24da-4971-9a35-0b0887b0ee5e", "record_id": "flaws_cloudtrail:0000582:e3d880d3-24da-4971-9a35-0b0887b0ee5e", "row_index": 582, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d880d3-24da-4971-9a35-0b0887b0ee5e", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "record_id": "flaws_cloudtrail:0000583:16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "row_index": 583, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba4b7681-1987-4a6d-a810-a17936f85", "record_id": "flaws_cloudtrail:0000584:ba4b7681-1987-4a6d-a810-a17936f85", "row_index": 584, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba4b7681-1987-4a6d-a810-a17936f85", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64c22af0-7017-4e01-a77e-2dbc4fc16720", "record_id": "flaws_cloudtrail:0000585:64c22af0-7017-4e01-a77e-2dbc4fc16720", "row_index": 585, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64c22af0-7017-4e01-a77e-2dbc4fc16720", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf204e2-9877-4ddc-8252-09139aaa10ac", "record_id": "flaws_cloudtrail:0000586:cdf204e2-9877-4ddc-8252-09139aaa10ac", "row_index": 586, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf204e2-9877-4ddc-8252-09139aaa10ac", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a6b934-973e-482d-8c98-92fe794543", "record_id": "flaws_cloudtrail:0000587:71a6b934-973e-482d-8c98-92fe794543", "row_index": 587, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a6b934-973e-482d-8c98-92fe794543", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "record_id": "flaws_cloudtrail:0000588:6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "row_index": 588, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "record_id": "flaws_cloudtrail:0000589:569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "row_index": 589, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "569f5c9e-07e8-40e7-b0aa-29a9f21f46b1", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "requestPayment": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8634d5-e621-4486-90b5-6169dc6283f5", "record_id": "flaws_cloudtrail:0000590:4a8634d5-e621-4486-90b5-6169dc6283f5", "row_index": 590, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8634d5-e621-4486-90b5-6169dc6283f5", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "record_id": "flaws_cloudtrail:0000591:c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "row_index": 591, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6f1f9d8-ce78-4afb-9065-8b27d5c039fe", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c33bb63-9170-48db-94ea-9c032c509660", "record_id": "flaws_cloudtrail:0000592:1c33bb63-9170-48db-94ea-9c032c509660", "row_index": 592, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c33bb63-9170-48db-94ea-9c032c509660", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a305032-74f9-4408-9903-b122b40210b8", "record_id": "flaws_cloudtrail:0000593:0a305032-74f9-4408-9903-b122b40210b8", "row_index": 593, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketPolicyStatus", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a305032-74f9-4408-9903-b122b40210b8", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketPolicyStatus", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyStatus": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165b8711-3e2e-48de-b057-0d26af1f883e", "record_id": "flaws_cloudtrail:0000594:165b8711-3e2e-48de-b057-0d26af1f883e", "row_index": 594, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165b8711-3e2e-48de-b057-0d26af1f883e", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "013503-b022-4fad-b790-1ac145c288ba", "record_id": "flaws_cloudtrail:0000595:013503-b022-4fad-b790-1ac145c288ba", "row_index": 595, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "013503-b022-4fad-b790-1ac145c288ba", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25f43249-621a-4fac-8e2e-494e756c7af2", "record_id": "flaws_cloudtrail:0000596:25f43249-621a-4fac-8e2e-494e756c7af2", "row_index": 596, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25f43249-621a-4fac-8e2e-494e756c7af2", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ef6a52-d92c-4a82-bb02-3c735c444a6d", "record_id": "flaws_cloudtrail:0000597:49ef6a52-d92c-4a82-bb02-3c735c444a6d", "row_index": 597, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ef6a52-d92c-4a82-bb02-3c735c444a6d", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"lifecycle": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d880d3-24da-4971-9a35-0b0887b0ee5e", "record_id": "flaws_cloudtrail:0000598:e3d880d3-24da-4971-9a35-0b0887b0ee5e", "row_index": 598, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d880d3-24da-4971-9a35-0b0887b0ee5e", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "record_id": "flaws_cloudtrail:0000599:16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "row_index": 599, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d3fcc6-c521-4c1f-8bb7-6a1135e085307", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba4b7681-1987-4a6d-a810-a17936f85", "record_id": "flaws_cloudtrail:0000600:ba4b7681-1987-4a6d-a810-a17936f85", "row_index": 600, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba4b7681-1987-4a6d-a810-a17936f85", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64c22af0-7017-4e01-a77e-2dbc4fc16720", "record_id": "flaws_cloudtrail:0000601:64c22af0-7017-4e01-a77e-2dbc4fc16720", "row_index": 601, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64c22af0-7017-4e01-a77e-2dbc4fc16720", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf204e2-9877-4ddc-8252-09139aaa10ac", "record_id": "flaws_cloudtrail:0000602:cdf204e2-9877-4ddc-8252-09139aaa10ac", "row_index": 602, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf204e2-9877-4ddc-8252-09139aaa10ac", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a6b934-973e-482d-8c98-92fe794543", "record_id": "flaws_cloudtrail:0000603:71a6b934-973e-482d-8c98-92fe794543", "row_index": 603, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a6b934-973e-482d-8c98-92fe794543", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "record_id": "flaws_cloudtrail:0000604:6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "row_index": 604, "timestamp": "2019-06-21T00:23:16Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fb4d48e-728c-4233-bd7b-28c9f08b82cc", "eventTime": "2019-06-21T00:23:16Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b1c821a-ad34-402f-925b-23b84bc2f87f", "record_id": "flaws_cloudtrail:0000605:8b1c821a-ad34-402f-925b-23b84bc2f87f", "row_index": 605, "timestamp": "2019-06-21T00:23:18Z", "event_type": "GetBucketRequestPayment", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b1c821a-ad34-402f-925b-23b84bc2f87f", "eventTime": "2019-06-21T00:23:18Z", "eventName": "GetBucketRequestPayment", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "[Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "requestPayment": [""]}, "resources": []}}